Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Fwupd Subscribe
Filtered by product Fwupd
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-3287 1 Fwupd 1 Fwupd 2022-09-30 N/A 6.5 MEDIUM
When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.