CVE-2024-8059CWE-319

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters

Medium · published September 13, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.7th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2024-09-13T17:27Z
EPSS history
Timeline
  • 13 SEP 17:27Z
    IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters
    cvelistv5