CVE-2022-29588

Name of the Vulnerable Software and Affected Versions Konica Minolta bizhub MFP devices versions prior to 2022-04-14

Description The issue concerns the use of cleartext password storage for sensitive files, specifically the /var/log/nginx/html/ADMINPASS and /etc/shadow files. This storage method poses a significant risk as it allows unauthorized access to administrative passwords.

Recommendations For versions prior to 2022-04-14, update the device to a version released after 2022-04-14 to ensure secure password storage. As a temporary workaround, consider restricting access to the /var/log/nginx/html/ADMINPASS and /etc/shadow files to minimize the risk of exploitation. Avoid using the ADMINPASS and /etc/shadow files until the issue is resolved.