CVE-2020-14156

user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions

published June 15, 2020

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01809 · 78.4th percentile
Published
2020-06-15T17:35Z
EPSS history
Timeline
  • 15 JUN 17:35Z
    user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions
    cvelistv5