CVE-2022-2805
Fixed in a distro release EPSS <1%CVSS 6.5
A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss.
Products: redhat virtualization
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhev manager 4.4 el8 | ovirt-engine | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-backend | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-dbscripts | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-dwh | 0:4.5.7-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-dwh-grafana-integration-setup | 0:4.5.7-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-dwh-setup | 0:4.5.7-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-health-check-bundler | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-restapi | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-base | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-cinderlib | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-imageio | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-ovirt-engine | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-ovirt-engine-common | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-vmconsole-proxy-helper | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-websocket-proxy | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-tools | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-tools-backup | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-ui-extensions | 0:1.3.6-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-vmconsole-proxy-helper | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-webadmin-portal | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-websocket-proxy | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-web-ui | 0:1.9.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | python3-ovirt-engine-lib | 0:4.5.3.2-1.el8ev |
| Red Hat rhev manager 4.4 el8 | rhvm | 0:4.5.3.2-1.el8ev |