bmcweb (OpenBMC web server): four vulnerabilities — two unfixed, GHSA without a CVE

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-01 06:23 UTC
Importiert: 2026-06-16 07:20 UTC
Quelle-ID: full_disc
uid_hash: 87d132fea61a6edf01eb7d095acec26b72bc6fdb40867b5faf0b4df512932016

Full Disclosure

Posted by binreaper via Fulldisclosure on May 31 Hi all,

Posting a brief summary of a four-finding disclosure on bmcweb (the OpenBMC HTTP/Redfish web server), which ships in

BMC firmware on most modern enterprise servers — Intel, IBM, HPE, NVIDIA, and various ODMs.

Full timeline and analysis on the blog:

A Baseboard Management Controller boots before the host CPU, has full control over the server...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss