Medium · published July 28, 2026
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.
| Product | Versions | Fixed in |
|---|---|---|
| ibm/power_system_s1122_\(9824-22a\)_firmware | ≥ fw1110.00, < fw1110.30 | fw1110.30 |
| ibm/power_system_s1124_\(9824-42a\)_firmware | ≥ fw1110.00, < fw1110.30 | fw1110.30 |
| ibm/power_system_s1122s_\(9824-22b\)_firmware | ≥ fw1110.00, < fw1110.30 | fw1110.30 |
| ibm/power_system_s1114_\(9824-41b\)_firmware | ≥ fw1110.00, < fw1110.30 | fw1110.30 |
| ibm/power_system_l1122_\(9856-22h\)_firmware | ≥ fw1110.00, < fw1110.30 | fw1110.30 |
| ibm/power_system_l1124_\(9856-42h\)_firmware | ≥ fw1110.00, < fw1110.30 | fw1110.30 |
| ibm/power_system_e1150_\(9043-mru\)_firmware | ≥ fw1110.00, < fw1110.30 | fw1110.30 |
| ibm/power_system_s1022_\(9105-22a\)_firmware | ≥ fw1060.00, < fw1060.72 | fw1060.72 |
| ibm/power_system_s1024_\(9105-42a\)_firmware | ≥ fw1060.00, < fw1060.72 | fw1060.72 |
| ibm/power_system_s1022s_\(9105-22b\)_firmware | ≥ fw1060.00, < fw1060.72 | fw1060.72 |
| ibm/power_system_s1014_\(9105-41b\)_firmware | ≥ fw1060.00, < fw1060.72 | fw1060.72 |
| ibm/power_system_l1022_\(9786-22h\)_firmware | ≥ fw1060.00, < fw1060.72 | fw1060.72 |
| ibm/power_system_l1024_\(9786-42h\)_firmware | ≥ fw1060.00, < fw1060.72 | fw1060.72 |
| ibm/power_system_e1050_\(9043-mrx\)_firmware | ≥ fw1060.00, < fw1060.72 | fw1060.72 |
| ibm/power_system_s1012_\(9028-21b\)_firmware | ≥ fw1060.00, < fw1060.72 | fw1060.72 |