IBM OpenBMC vulnerabilities

IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access can execute arbitrary code under specific conditions, impacting confidentiality, integrity, and availability.

IBM OpenBMC versions FW1110.00 through FW1110.20 and FW1060.00 through FW1060.71 allow a user to supply a password with a resource dump request, which is then stored in the BMC audit log where an admin user can see it.

IBM OpenBMC versions FW1110.00 through FW1110.20 and FW1060.00 through FW1060.71 allow ReadOnly users to escalate privileges and give themselves administrator privileges.