[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fARgWrSxoLWoDaZQQdWEUF2zwqnYaUyKnFyDZ_XTLIW0":3,"g5a-risk:CVE-2020-14156":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":39,"epssPercentile":25,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":64,"weaknesses":65,"weaknessesCount":48,"isActivelyExploited":74,"cisaInfo":25,"otxData":25,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":110,"notableEvents":111},"CVE-2020-14156","What is CVE-2020-14156?","user_channel\u002Fpasswd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that \u002Fetc\u002Fipmi-pass has strong file permissions.","2020-06-15T18:15:15.207","2020-06-22T18:33:42.99",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[29],{"Source":16,"Type":17,"CVSSData":30,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":20,"AccessComplexity":21,"Authentication":33,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.01809,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"openbmc-project","openbmc","*","cpe:2.3:a:openbmc-project:openbmc:*:*:*:*:*:*:*:*",1,[50,55,59],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fgithub.com\u002Fopenbmc\u002Fopenbmc\u002Fissues\u002F3670","GitHub",[54],"Third Party Advisory",{"url":56,"source":52,"tags":57},"https:\u002F\u002Fgithub.com\u002Fopenbmc\u002Fphosphor-host-ipmid\u002Fcommit\u002Fb265455a2518ece7c004b43c144199ec980fc620",[58,54],"Patch",{"url":60,"source":61,"tags":62},"https:\u002F\u002Flists.ozlabs.org\u002Fpipermail\u002Fopenbmc\u002F2020-June\u002F022020.html","Ozlabs",[63,54],"Mailing List",3,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2020-14156? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-14156, a high severity cyber security vulnerability from 2020. user_channel\u002Fpasswd_mgr.cpp in OpenBMC phosphor-host-ipmid ...","CVE-2020-14156, CVE-2020-14156 vulnerability, CVE-2020-14156 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, openbmc-project security, openbmc vulnerability","\u002Fwhat-is\u002Fcve-2020-14156",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":9,"dateModified":10,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-14156","Cybersecurity","CVE-2020-14156, CVE-2020-14156 vulnerability, CVE-2020-14156 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":25,"Negate":25,"Nodes":103},[104],{"Operator":105,"Negate":25,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":108,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":109,"VersionEndIncluding":25},"AE58FF9E-003C-46AB-9FCE-2A21807009C7","2020-04-03",[],[],{"lastModified":10,"cacheTime":113,"version":31},1792377213285,{"score":115,"band":116,"action":117,"scoredAt":118},47,"Medium","Plan remediation","2026-10-16T06:48:48.210761+00:00"]