Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37509
HistoryOct 11, 2022 - 1:16 p.m.

Information Disclosure

2022-10-1113:16:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
fwupd
information disclosure
bmc
operator account
configuration files

0.001 Low

EPSS

Percentile

28.6%

fwupd is vulnerable to information disclosure. The vulnerability exists when creating an OPERATOR user account on the BMC, allowing an attacker to read the the configuration files on the system.