Vulnerabilities (CVE)

Filtered by vendor Openbmcs Subscribe
Filtered by product Openbmcs
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-47701 1 Openbmcs 1 Openbmcs 2025-12-17 N/A 8.8 HIGH
OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and exploiting a vulnerability in the update_user_permissions.php script. Attackers can submit a malicious HTTP POST request to PHP scripts in '/plugins/useradmin/' directory.