CVE-2020-14156

userchannel/passwdmgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions...

CVE-2020-14156: Incorrect Default Permissions

userchannel/passwdmgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions...

PT-2020-13897

Name of the Vulnerable Software and Affected Versions OpenBMC phosphor-host-ipmid versions prior to 2020-04-03 Description The issue arises from the user channel/passwd mgr.cpp file in OpenBMC phosphor-host-ipmid, which does not ensure that the /etc/ipmi-pass file has strong file permissions. Thi...