The vulnerability of fwupd, a daemon used for managing firmware updates in Linux-based systems, allows an attacker to access confidential information.

The vulnerability of fwupd for managing firmware updates in Linux-based systems is related to the storage of automatically generated passwords in /etc/fwupd/redfish.conf without proper restrictions. Exploiting this vulnerability allows a remote attacker to access confidential information...