Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:chassis_management_module_(cmm):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductChassis Management Module (Cmm) (0eee828d-39f7-5abd-8b09-34dc9af99420)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-9073 vulnerable 2026-06-08 05:12:07.682196 CMM Security Vulnerability
Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets.
Published: 2018-11-16T14:00:00.000Z
Updated: 2024-08-05T07:17:50.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-9071 vulnerable 2026-06-08 05:12:07.678593 CMM Security Vulnerability
Lenovo Chassis Management Module (CMM) prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. Exposed settings relate to password lengths, expiration, and lockout configuration.
Published: 2018-11-16T14:00:00.000Z
Updated: 2024-08-05T07:17:50.339Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.