openbmc/phosphor-host-ipmid

openbmc/phosphor-host-ipmid

GitHubGitHub
GitHubgithub.com
Releases0
Stars47
dbus-based ipmid for host-endpoint IPMI commands
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-14156↗
8.8 HIGH6.5 MEDIUM

user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions.