{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-29T20:14:33.630","vulnerabilities":[{"cve":{"id":"CVE-2018-9071","sourceIdentifier":"psirt@lenovo.com","published":"2018-11-16T14:29:00.347","lastModified":"2026-06-17T02:06:01.693","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Lenovo Chassis Management Module (CMM) prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. Exposed settings relate to password lengths, expiration, and lockout configuration."},{"lang":"es","value":"Lenovo Chassis Management Module (CMM) en versiones anteriores a la 2.0.0 permite que usuarios no autenticados recuperen información relacionada con las opciones actuales de configuración de autenticación. Las opciones expuestas están relacionadas con la configuración de longitud de contraseña, expiración y bloqueo."}],"affected":[{"source":"psirt@lenovo.com","affectedData":[{"vendor":"Lenovo","product":"Chassis Management Module (CMM)","versions":[{"version":"unspecified","lessThan":"2.0.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:lenovo:chassis_management_module_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.0","matchCriteriaId":"5F536010-AF72-40A8-A3E3-DDFFCAD11D91"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:lenovo:chassis_management_module:-:*:*:*:*:*:*:*","matchCriteriaId":"2FED06AE-EA3E-41C2-85E2-CC85AD41740D"}]}]}],"references":[{"url":"https://support.lenovo.com/us/en/solutions/LEN-23806","source":"psirt@lenovo.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://support.lenovo.com/us/en/solutions/LEN-23806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}}]}