Red Hat Security Advisory

RHSA-2024:1106

fwupd security update

Released 2024-03-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.8.6) fwupd-devel-1.7.4-3.el8_6
Red Hat Enterprise Linux BaseOS EUS (v.8.6) fwupd-1.7.4-3.el8_6

Fixes 1 record

TI-2022-03037 CVE-2022-3287 · GHSA-7qqr-wwjq-98v6

When creating an OPERATOR user account on the BMC, the redfish plugin saved the…

LOW 30

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuratio…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00827 Published 2022-09-28 Fixed CWE-256