7.5
High
CVE-2024-31916 IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an…
Description
IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OPENBMC | Versions not published |
Other CVEs of OPENBMC
The 10 CVEs of OPENBMC →
CVE-2026-18857
IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a…
3.4
Low
CVE-2026-18849
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process
6.8
Medium
CVE-2026-7868
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges…
6.5
Medium
CVE-2026-8058
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a…
4.5
Medium