title: CMM Security Vulnerability
description: Lenovo Chassis Management Module (CMM) prior to version 2.0.0 allows unauthenticated users to retrieve information related to the current authentication configuration settings. Exposed settings relate to password lengths, expiration, and lockout configuration.
problem types: Information Disclosure
affected:
{
product: Chassis Management Module (CMM)
vendor: Lenovo
versions:
lessThan: 2.0.0, status: affected, version: unspecified, versionType: custom
}
solutions: Update to CMM v 2.0.0 or higher