Red Hat Security Advisory

RHSA-2023:7189

fwupd security update

Released 2023-11-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) fwupd-devel-1.7.8-2.el8
Red Hat Enterprise Linux BaseOS (v. 8) fwupd-1.7.8-2.el8

Fixes 1 record

TI-2022-03037 CVE-2022-3287 · GHSA-7qqr-wwjq-98v6

When creating an OPERATOR user account on the BMC, the redfish plugin saved the…

LOW 30

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuratio…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00827 Published 2022-09-28 Fixed CWE-256