HIGH🇬🇧 English

CVE-2020-14156

CVSS 8.8v3.1pub. 2020-06-15upd. 2024-11-21

user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Openbmc Project Openbmc

    APP
    Openbmc-Project
    < 2020-04-03
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2021-39296CRITICAL10.0ten sam produkt

In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the ...

CVE-2021-39295HIGH7.5ten sam produkt

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipm...

CVE-2022-35729HIGH7.5ten sam produkt

Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenti...

CVE-2022-2809HIGH8.2ten sam produkt

A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. When fuzzing the multipar...

CVE-2022-3409HIGH8.2ten sam produkt

A vulnerability in bmcweb of OpenBMC Project allows user to cause denial of service. This vulnerability was id...