IBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changed away from the default password. IBM X-Force ID: 158702.Referenceshttp://www.ibm.com/support/docview.wss?uid=ibm10881209https://exchange.xforce.ibmcloud.com/vulnerabilities/158702