Read the docs
TI-2019-04364 Aliases CVE-2019-6161GHSA-4jq6-g4xr-95fp

Session fixation in Lenovo ThinkAgile CP-SB

Priority LOW 36CWE-384Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-384.

Summary

An internal product security audit discovered a session handling vulnerability in the web interface of ThinkAgile CP-SB (Storage Block) BMC in firmware versions prior to 1908.M. This vulnerability allows session IDs to be reused, which could provide unauthorized access to the BMC under certain circumstances. This vulnerability does not affect ThinkSystem XCC, System x IMM2, or other BMCs.

Why it matters now

EPSS 0.01384 72nd percentileScored 2026-11-07
Fix Fixed ThinkAgile CP-SB (Lenovo): 1908.M

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
LenovoThinkAgile CP-SBbefore 1908.M1908.MPatch availableCNA
  • ThinkAgile CP-SB VendorLenovo Affected before 1908.M Fixed in 1908.M Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:lenovo:cp_storage_block_firmware:*:*:*:*:*:*:*:*before 1908.mVulnerableLenovo
cpe:2.3:h:lenovo:cp_storage_block:-:*:*:*:*:*:*:*not specified by NVDRunning onLenovo
  • cpe:2.3:o:lenovo:cp_storage_block_firmware:*:*:*:*:*:*:*:* Versions before 1908.m Vulnerable ·Lenovo
  • cpe:2.3:h:lenovo:cp_storage_block:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo

Remediation

  • Fix · CNA ThinkAgile CP-SB (Lenovo) Fixed in 1908.M

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-6161
  2. 2026-10-03 Alias added: GHSA-4jq6-g4xr-95fp

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences