Read the docs
Red Hat Security Advisory

RHSA-2023:2487

fwupd security and bug fix update

Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

Priority LOW 30

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuratio…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00827 Published 2022-09-28 Fixed CWE-256