Aller au contenu
Se connecter
6.5 Moyenne

CVE-2022-3287 When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to…

Description

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

Produits et versions touchés

Produit Versions touchées Corrigé en
fwupd Versions non publiées

Autres CVE de fwupd

Les 2 CVE de fwupd →
CVE-2020-10759 A PGP signature bypass flaw was found in fwupd (all versions), which could lead to the installation of unsigned firmware Non notée
Suivre cette CVE