← Back

CVE-2019-6169

nvd nist
Published: Jun 26, 2019Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.

Affected (1)

Lenovo
1 product
Service Bridge
Configuration A
1 vulnerable · 7 platform
Vulnerable SoftwareAffected Versions
Service Bridge
Before 4.1.0.1
Running on/withPlatform Versions
Lenovo
Ideacentre
All versions
Lenovo
Ideapad
All versions
Lenovo
Tablet
All versions
Lenovo
Thinkcentre
All versions
Lenovo
Thinkpad
All versions
Lenovo
Thinkstation
All versions
Lenovo
Yoga
All versions

Related CWEs

CWE-311
Missing Encryption of Sensitive Data
The product does not encrypt sensitive or critical information before storage or transmission.

References (2)

Source: psirt@lenovo.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.