CVEvulnerability

CVE-2023-31041

7.5 HIGH Published 2023-08-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-312

Description

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure.

Affected configurations

• insyde insydeh2o 5.0 • insyde insydeh2o 5.1 • insyde insydeh2o 5.2 • insyde insydeh2o 5.3 • insyde insydeh2o 5.4 • insyde insydeh2o 5.5

Related

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

References