Filtered by vendor Fwupd Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-3287 2 Fwupd, Redhat 3 Fwupd, Enterprise Linux, Rhel Eus 2024-08-03 6.5 Medium
When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.