CVE-2022-3287

Synopsis Moderate: fwupd security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for fwupd is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as hav ...

Synopsis Moderate: fwupd security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for fwupd is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a securi ...

Description<!----> A flaw was found in fwupd When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfishconf without proper restriction, allowing any user on the system to read the same configuration file A flaw was found in fwupd When creating an OPERATOR user acco ...