medium4.5
CVE-2026-8058
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password i…
Impact
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Power System S1122 \(9824-22a\) Firmware | from fw1110.00 before fw1110.30 |
| Ibm | Power System S1124 \(9824-42a\) Firmware | from fw1110.00 before fw1110.30 |
| Ibm | Power System S1122s \(9824-22b\) Firmware | from fw1110.00 before fw1110.30 |
| Ibm | Power System S1114 \(9824-41b\) Firmware | from fw1110.00 before fw1110.30 |
| Ibm | Power System L1122 \(9856-22h\) Firmware | from fw1110.00 before fw1110.30 |
| Ibm | Power System L1124 \(9856-42h\) Firmware | from fw1110.00 before fw1110.30 |
| Ibm | Power System E1150 \(9043-Mru\) Firmware | from fw1110.00 before fw1110.30 |
| Ibm | Power System S1022 \(9105-22a\) Firmware | from fw1060.00 before fw1060.72 |
| Ibm | Power System S1024 \(9105-42a\) Firmware | from fw1060.00 before fw1060.72 |
| Ibm | Power System S1022s \(9105-22b\) Firmware | from fw1060.00 before fw1060.72 |
| Ibm | Power System S1014 \(9105-41b\) Firmware | from fw1060.00 before fw1060.72 |
| Ibm | Power System L1022 \(9786-22h\) Firmware | from fw1060.00 before fw1060.72 |