Not rated
CVE-2018-9073 Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain…
Description
Lenovo Chassis Management Module (CMM) prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Chassis Management Module (CMM) 2.0 | earliest → < 2.0.0 | 2.0.0 |