https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:29:48 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:2487 <p><strong>Affected:</strong> AlmaLinux:9: fwupd, AlmaLinux:9: fwupd-devel, AlmaLinux:9: fwupd-plugin-flashrom</p> <p>The fwupd packages provide a service that allows session software to update device firmware.</p> <p>Security Fix(es):</p> <p>* fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34301) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34302) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34303)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: fwupd, AlmaLinux:9: fwupd-devel, AlmaLinux:9: fwupd-plugin-flashrom</p> <p>The fwupd packages provide a service that allows session software to update device firmware.</p> <p>Security Fix(es):</p> <p>* fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34301) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34302) * shim: 3rd party shim allow secure boot bypass (CVE-2022-34303)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:2487 https://cve.radiocsirt.org/vuln/bdu:2024-06519 bdu:2024-06519 https://cve.radiocsirt.org/vuln/bdu:2024-06519 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0579 certfr-2024-avi-0579 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0579 https://cve.radiocsirt.org/vuln/euvd-2026-240525 EUVD-2026-240525 https://cve.radiocsirt.org/vuln/euvd-2026-240525 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3287 <p>When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.</p> <p>When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-3287 https://cve.radiocsirt.org/vuln/ghsa-7qqr-wwjq-98v6 <p>When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.</p> <p>When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.</p> https://cve.radiocsirt.org/vuln/ghsa-7qqr-wwjq-98v6 https://cve.radiocsirt.org/vuln/gsd-2022-3287 gsd-2022-3287 https://cve.radiocsirt.org/vuln/gsd-2022-3287 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12438-1 <p>dfu-tool-1.8.6-1.1 on GA media</p> <p>dfu-tool-1.8.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12438-1 https://cve.radiocsirt.org/vuln/rhsa-2024:1106 <p>fwupd: world readable password in /etc/fwupd/redfish.conf</p> <p>fwupd: world readable password in /etc/fwupd/redfish.conf</p> https://cve.radiocsirt.org/vuln/rhsa-2024:1106 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3287 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: fwupd, Ubuntu:22.04:LTS: fwupd</p> <p>When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: fwupd, Ubuntu:22.04:LTS: fwupd</p> <p>When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3287 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1185 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1185