PT-2020-13897

Name of the Vulnerable Software and Affected Versions OpenBMC phosphor-host-ipmid versions prior to 2020-04-03 Description The issue arises from the user channel/passwd mgr.cpp file in OpenBMC phosphor-host-ipmid, which does not ensure that the /etc/ipmi-pass file has strong file permissions. Thi...