Orta CVSS 4.9
CVE-2026-8058: Power System S1122 (9824-22a) Firmware: hassas bilgi ifşası
Açıklama (NVD)
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.
Özet bilgiler
- Ürün
- Ibm Power System S1122 (9824-22a) Firmware
- CVSS v3.1
- 4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - EPSS
- %0,36 (yüzdelik 30)
- CWE
- CWE-200
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-power-system-s1122-9824-22a-firmware | fw1110.00 | — | fw1110.30 |
| ibm-power-system-s1124-9824-42a-firmware | fw1110.00 | — | fw1110.30 |
| ibm-power-system-s1122s-9824-22b-firmware | fw1110.00 | — | fw1110.30 |
| ibm-power-system-s1114-9824-41b-firmware | fw1110.00 | — | fw1110.30 |
| ibm-power-system-l1122-9856-22h-firmware | fw1110.00 | — | fw1110.30 |
| ibm-power-system-l1124-9856-42h-firmware | fw1110.00 | — | fw1110.30 |
| ibm-power-system-e1150-9043-mru-firmware | fw1110.00 | — | fw1110.30 |
| ibm-power-system-s1022-9105-22a-firmware | fw1060.00 | — | fw1060.72 |
| ibm-power-system-s1024-9105-42a-firmware | fw1060.00 | — | fw1060.72 |
| ibm-power-system-s1022s-9105-22b-firmware | fw1060.00 | — | fw1060.72 |
| ibm-power-system-s1014-9105-41b-firmware | fw1060.00 | — | fw1060.72 |
| ibm-power-system-l1022-9786-22h-firmware | fw1060.00 | — | fw1060.72 |
| ibm-power-system-l1024-9786-42h-firmware | fw1060.00 | — | fw1060.72 |
| ibm-power-system-e1050-9043-mrx-firmware | fw1060.00 | — | fw1060.72 |
| ibm-power-system-s1012-9028-21b-firmware | fw1060.00 | — | fw1060.72 |