EUVD-2020-6313

Malware in sbrugna...

OpenBMC phosphor-host-ipmid elevation of privilege vulnerability

OpenBMC phosphor-host-ipmid is a dbus-based ipmid Intelligent Platform Management Interface Server from the OpenBMC community. A security vulnerability exists in the userchannel/passwdmgr.cpp file in versions of OpenBMC phosphor-host-ipmid prior to 2020-04-03, which stems from a program that...

CVE-2020-14156

userchannel/passwdmgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions...

CVE-2020-14156

userchannel/passwdmgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions...

CVE-2020-14156

userchannel/passwdmgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions...

CVE-2020-14156

The CVE-2020-14156 issue affects OpenBMC phosphor-host-ipmid prior to 2020-04-03, where user_channel/passwd_mgr.cpp failed to ensure strong permissions on /etc/ipmi-pass. This allowed an attacker to read credentials and potentially escalate privileges to IPMI users. Reported in multiple sources (...

CVE-2020-14156

userchannel/passwdmgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions...

CVE-2020-14156: Incorrect Default Permissions

userchannel/passwdmgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions...

PT-2020-13897

Name of the Vulnerable Software and Affected Versions OpenBMC phosphor-host-ipmid versions prior to 2020-04-03 Description The issue arises from the user channel/passwd mgr.cpp file in OpenBMC phosphor-host-ipmid, which does not ensure that the /etc/ipmi-pass file has strong file permissions. Thi...