Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2022-3287

fwupd: world readable password in /etc/fwupd/redfish.conf

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fwupd Redhat
Products
Fwupd Enterprise Linux Rhel Eus