IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7158679 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/290026 | VDB Entry Vendor Advisory |
Configurations
History
06 Aug 2024, 16:24
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ibm
Ibm openbmc |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | () https://www.ibm.com/support/pages/node/7158679 - Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/290026 - VDB Entry, Vendor Advisory | |
| CPE | cpe:2.3:o:ibm:openbmc:*:*:*:*:*:*:*:* | |
| CWE | CWE-306 |
27 Jun 2024, 19:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-27 18:15
Updated : 2024-08-06 16:24
NVD link : CVE-2024-31916
Mitre link : CVE-2024-31916
JSON object : View
Products Affected
ibm
- openbmc
CWE
CWE-306
Missing Authentication for Critical Function