CVE-2026-8058

EPSS 0.36%
Veröffentlicht 28.07.2026 16:20:21
Zuletzt bearbeitet 26.08.2026 14:30:01
Erkennungen
Login

This Power System update is being released to address a sensitive information disclosure

IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 0 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.36%	0.284

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
IBM	4.5	0.9	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://www.ibm.com/support/pages/node/7280642

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-8058

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-8058

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-8058

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-8058