Every CVE Search/ Get API key

CVE-2022-3287

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated...

6.5 MediumFix available

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.83%Down 0.1 points since Sep 29, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

Record
CVE-2022-3287
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-256, CWE-552
Updated
2026-11-02
CVE List 6.5

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

Record
CVE-2022-3287
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-256
Updated
2026-11-02
EUVDEUVD-2022-42683 6.5

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

Record
EUVD-2022-42683
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-7qqr-wwjq-98v6 6.5

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated...

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

Record
GHSA-7qqr-wwjq-98v6
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-256, CWE-552
Updated
2026-11-02
OSV 6.5

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

Record
CVE-2022-3287
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-256
Updated
2026-11-02
OSVDEBIAN-CVE-2022-3287 6.5

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

Record
DEBIAN-CVE-2022-3287
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
Show 9 moreShow less
OSVRHSA-2023:2487 7.5

Red Hat Security Advisory: fwupd security and bug fix update

Record
RHSA-2023:2487
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7189 5.5

Red Hat Security Advisory: fwupd security update

Record
RHSA-2023:7189
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2024:1106 5.5

Red Hat Security Advisory: fwupd security update

Record
RHSA-2024:1106
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2024:1403 5.5

Red Hat Security Advisory: fwupd security update

Record
RHSA-2024:1403
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2022-3287 6.5

When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file.

Record
UBUNTU-CVE-2022-3287
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2023:2487 No score

Moderate: fwupd security and bug fix update

The fwupd packages provide a service that allows session software to update device firmware.

Security Fix(es):

  • fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287)
  • shim: 3rd party shim allow secure boot bypass (CVE-2022-34301)
  • shim: 3rd party shim allow secure boot bypass (CVE-2022-34302)
  • shim: 3rd party shim allow secure boot bypass (CVE-2022-34303)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2487
Updated
2026-11-02
OSVALSA-2023:7189 No score

Moderate: fwupd security update

The fwupd packages provide a service that allows session software to update device firmware.

Security Fix(es):

  • fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:7189
Updated
2026-11-02
OSVopenSUSE-SU-2024:12438-1 No score

dfu-tool-1.8.6-1.1 on GA media

These are all security issues fixed in the dfu-tool-1.8.6-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12438-1
Updated
2026-11-02
OSVRLSA-2023:7189 No score

Moderate: fwupd security update

The fwupd packages provide a service that allows session software to update device firmware.

Security Fix(es):

  • fwupd: world readable password in /etc/fwupd/redfish.conf (CVE-2022-3287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.

Record
RLSA-2023:7189
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fwupd
AlmaLinux:9
From an advisory covering 4 CVEs
 before 1.8.10-2.el9.alma
1.8.10-2.el9.alma
fwupd-devel
AlmaLinux:9
From an advisory covering 4 CVEs
 before 1.8.10-2.el9.alma
1.8.10-2.el9.alma
fwupd-plugin-flashrom
AlmaLinux:9
From an advisory covering 4 CVEs
 before 1.8.10-2.el9.alma
1.8.10-2.el9.alma
fwupd
AlmaLinux:8
 before 1.7.8-2.el8
1.7.8-2.el8
fwupd-devel
AlmaLinux:8
 before 1.7.8-2.el8
1.7.8-2.el8
fwupd
Debian:12
 before 1.8.5-1
1.8.5-1
fwupd
Debian:13
 before 1.8.5-1
1.8.5-1
fwupd
Debian:14
 before 1.8.5-1
1.8.5-1
fwupd-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
Show 41 moreShow less
Affected packages
PackageAffectedFixed
fwupd-plugin-flashrom
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-plugin-flashrom-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-tests-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-plugin-flashrom-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-tests-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-plugin-flashrom-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd-tests-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 4 CVEs
 before 0:1.8.10-2.el9
0:1.8.10-2.el9
fwupd
Red Hat:enterprise_linux:8::baseos
 before 0:1.7.8-2.el8
0:1.7.8-2.el8
fwupd-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.7.8-2.el8
0:1.7.8-2.el8
fwupd-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.7.8-2.el8
0:1.7.8-2.el8
fwupd-tests-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.7.8-2.el8
0:1.7.8-2.el8
fwupd-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.7.8-2.el8
0:1.7.8-2.el8
fwupd-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:1.7.8-2.el8
0:1.7.8-2.el8
fwupd-devel
Red Hat:enterprise_linux:8::crb
 before 0:1.7.8-2.el8
0:1.7.8-2.el8
fwupd-tests-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.7.8-2.el8
0:1.7.8-2.el8
fwupd
Red Hat:rhel_eus:8.6::baseos
 before 0:1.7.4-3.el8_6
0:1.7.4-3.el8_6
fwupd-debuginfo
Red Hat:rhel_eus:8.6::baseos
 before 0:1.7.4-3.el8_6
0:1.7.4-3.el8_6
fwupd-debugsource
Red Hat:rhel_eus:8.6::baseos
 before 0:1.7.4-3.el8_6
0:1.7.4-3.el8_6
fwupd-tests-debuginfo
Red Hat:rhel_eus:8.6::baseos
 before 0:1.7.4-3.el8_6
0:1.7.4-3.el8_6
fwupd-debuginfo
Red Hat:rhel_eus:8.6::crb
 before 0:1.7.4-3.el8_6
0:1.7.4-3.el8_6
fwupd-debugsource
Red Hat:rhel_eus:8.6::crb
 before 0:1.7.4-3.el8_6
0:1.7.4-3.el8_6
fwupd-devel
Red Hat:rhel_eus:8.6::crb
 before 0:1.7.4-3.el8_6
0:1.7.4-3.el8_6
fwupd-tests-debuginfo
Red Hat:rhel_eus:8.6::crb
 before 0:1.7.4-3.el8_6
0:1.7.4-3.el8_6
fwupd
Red Hat:rhel_eus:8.8::baseos
 before 0:1.7.8-2.el8_8
0:1.7.8-2.el8_8
fwupd-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 0:1.7.8-2.el8_8
0:1.7.8-2.el8_8
fwupd-debugsource
Red Hat:rhel_eus:8.8::baseos
 before 0:1.7.8-2.el8_8
0:1.7.8-2.el8_8
fwupd-tests-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 0:1.7.8-2.el8_8
0:1.7.8-2.el8_8
fwupd-debuginfo
Red Hat:rhel_eus:8.8::crb
 before 0:1.7.8-2.el8_8
0:1.7.8-2.el8_8
fwupd-debugsource
Red Hat:rhel_eus:8.8::crb
 before 0:1.7.8-2.el8_8
0:1.7.8-2.el8_8
fwupd-devel
Red Hat:rhel_eus:8.8::crb
 before 0:1.7.8-2.el8_8
0:1.7.8-2.el8_8
fwupd-tests-debuginfo
Red Hat:rhel_eus:8.8::crb
 before 0:1.7.8-2.el8_8
0:1.7.8-2.el8_8
fwupd
Rocky Linux:8
 before 0:1.7.8-2.el8.rocky.0.1
0:1.7.8-2.el8.rocky.0.1
fwupd
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.2.10-1ubuntu21.3.3-31.3.5-11.3.6-1ubuntu11.3.7-2
Show 14 moreShow less
1.3.7-31.3.8-11.3.9-11.3.9-1build11.3.9-21.3.9-2build11.3.9-31.3.9-41.3.9-4ubuntu0.11.3.11-1~focal11.5.11-0ubuntu1~20.04.21.7.5-3~20.04.11.7.9-1~20.04.11.7.9-1~20.04.3
 None known
fwupd
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.5.11-0ubuntu21.7.1-1ubuntu31.7.3-11.7.4-11.7.4-1ubuntu1
Show 5 moreShow less
1.7.5-31.7.9-1~22.04.11.7.9-1~22.04.32.0.20-1ubuntu2~22.04.12.0.20-1ubuntu2~22.04.2
 None known
fwupd
openSUSE:Tumbleweed
 before 1.8.6-1.1
1.8.6-1.1

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-3287 is a medium vulnerability (CVSS 6.5) in Fwupd, published September 28, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.83%, the 57th percentile. Fixed in fwupd 1.7.8-2.el8.

References

Show 40 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open