A flaw in IBM OPENBMC firmware versions FW1110.00 through FW1110.20 and FW1060.00 through FW1060.71 causes a supplied password in a resource dump request to be written unchanged into the BMC audit log. The audit log is viewable by administrative users, thereby leaking the attacker‑supplied password to anyone with audit log access. This represents a confidentiality‑impacting weakness identified as CWE‑200.

Affected products include IBM Power System S1122, S1124, S1122s, S1114, L1122, L1124, and E1150 for the FW1110 series; and IBM Power System S1022, S1024, S1022s, S1014, L1022, L1024, E1050, and S1012 for the FW1060 series. Users of these models should confirm that their firmware versions fall within the ranges noted above.

The CVSS score of 4.5 indicates a moderate impact, while the EPSS score of less than 1% signals a low probability of exploitation in the wild, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is an authenticated user or an attacker with the ability to issue a resource dump request to the BMC; the flaw does not require code execution or privilege escalation beyond the audit log viewer rights. An attacker who can observe audit logs could read the exposed password, potentially allowing credential compromise for the target system.