In various firmware versions of Lenovo System x, the integrated management module II (IMM2)s first failure data capture (FFDC) includes the web servers private key in the generated log file for support.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Flex_system_x240_m4_firmware | Lenovo | * | 5.30 (excluding) |