CVE-2024-31916CWE-288

IBM OpenBMC information disclosure

High · published June 27, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
45.3
In the wild
Unconfirmed
What it is

IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00550 · 45.3th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2024-06-27T17:45Z
EPSS history
Timeline
  • 27 JUN 17:45Z
    IBM OpenBMC information disclosure
    cvelistv5