Lucene search
Ubuntu.comUB:CVE-2022-3287HistorySep 28, 2022 - 12:00 a.m.
CVE-2022-3287
2022-09-2800:00:00
ubuntu.com
ubuntu.com
16
cve-2022-3287
operator user account
bmc
redfish plugin
password
configuration file
unix
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
28.6%
When creating an OPERATOR user account on the BMC, the redfish plugin saved
the auto-generated password to /etc/fwupd/redfish.conf without proper
restriction, allowing any user on the system to read the same configuration
file.
Related
nessus
nessus
RHEL 8 : fwupd (RHSA-2024:1106)
2024-03-05 00:00:00
Rocky Linux 8 : fwupd (RLSA-2023:7189)
2023-11-28 00:00:00
RHEL 8 : fwupd (RHSA-2023:7189)
2023-11-14 00:00:00
alpinelinux
alpinelinux
CVE-2022-3287
2022-09-28 20:15:00
osv
osv
CVE-2022-3287
2022-09-28 20:15:18
Moderate: fwupd security update
2023-11-14 00:00:00
Moderate: fwupd security update
2023-11-28 22:42:52
redhatcve
redhatcve
CVE-2022-3287
2022-09-28 12:48:53
oraclelinux
oraclelinux
fwupd security update
2023-11-17 00:00:00
fwupd security and bug fix update
2023-05-15 00:00:00
cve
cve
CVE-2022-3287
2022-09-28 20:15:18
cnvd
cnvd
fwupd information disclosure vulnerability
2022-09-30 00:00:00
prion
prion
Authorization
2022-09-28 20:15:00
redhat
redhat
(RHSA-2024:1106) Moderate: fwupd security update
2024-03-05 10:44:56
(RHSA-2024:1403) Moderate: fwupd security update
2024-03-19 16:35:06
(RHSA-2023:7189) Moderate: fwupd security update
2023-11-14 08:47:29
rocky
rocky
fwupd security update
2023-11-28 22:42:52
veracode
veracode
Information Disclosure
2022-10-11 13:16:39
debiancve
debiancve
CVE-2022-3287
2022-09-28 20:15:18
cvelist
cvelist
CVE-2022-3287
2022-09-28 19:07:38
almalinux
almalinux
Moderate: fwupd security update
2023-11-14 00:00:00
Moderate: fwupd security and bug fix update
2023-05-09 00:00:00
nvd
nvd
CVE-2022-3287
2022-09-28 20:15:18
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
28.6%
Related for UB:CVE-2022-3287