Lenovo Chassis Management Module
2 CVEs affecting Lenovo Chassis Management Module. Latest disclosed: 2018-11-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-9073 | Medium | 5.9 | 2018-11-16 | Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow a… |
CVE-2018-9071 | Medium | 5.3 | 2018-11-16 | Lenovo Chassis Management Module (CMM) prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication config… |