Medium severity · published Sep 1, 2022
CVE-2022-2806
It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered
5.5
CVSS
0.3%
EPSS
No
On KEV
Description
It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LC
Log Collector · Ovirt
before 4.4.7-2.el8ev · source: NVD
SO
Sos · Sos Project
before 4.2-20.el8_6 · source: NVD