EUVD-2020-6313

Malware in sbrugna...

OpenBMC phosphor-host-ipmid elevation of privilege vulnerability

OpenBMC phosphor-host-ipmid is a dbus-based ipmid Intelligent Platform Management Interface Server from the OpenBMC community. A security vulnerability exists in the userchannel/passwdmgr.cpp file in versions of OpenBMC phosphor-host-ipmid prior to 2020-04-03, which stems from a program that...

CVE-2020-14156

userchannel/passwdmgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions...

CVE-2020-14156

userchannel/passwdmgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions...

CVE-2020-14156

userchannel/passwdmgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions...

CVE-2020-14156

The CVE-2020-14156 issue affects OpenBMC phosphor-host-ipmid prior to 2020-04-03, where user_channel/passwd_mgr.cpp failed to ensure strong permissions on /etc/ipmi-pass. This allowed an attacker to read credentials and potentially escalate privileges to IPMI users. Reported in multiple sources (...