GitHub Advisoryadvisory · PyPI

GHSA-7pf9-7cff-f854 sosreport Exposure of Sensitive Information vulnerability

MEDIUM Published 2022-09-02 Modified 2024-04-08 Official page ↗
Aliases
CVE-2022-2806
Ecosystem
PyPI
Packages
sosreport
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200
Reviewed
2024-04-08

Affected packages

• PyPI sosreport: < 4.4 → fixed in 4.4

Description

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Related

Alias · CVE (1)

  • CVE-2022-2806 It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References