An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure.
| Software | From | Fixed in |
|---|---|---|
| insyde / insydeh2o | 5.0 | 5.0.x |
| insyde / insydeh2o | 5.1 | 5.1.x |
| insyde / insydeh2o | 5.2 | 5.2.x |
| insyde / insydeh2o | 5.3 | 5.3.x |
| insyde / insydeh2o | 5.4 | 5.4.x |
| insyde / insydeh2o | 5.5 | 5.5.x |