Skip to content
CVE PROGRAM SOURCE RECORD4.5 Medium

CVE-2026-8058

This Power System update is being released to address a sensitive information disclosure

Description

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM OPENBMC

  • FW1110.00 to ≤ FW1110.20affected
  • FW1060.00 to ≤ FW1060.71affected

References