CVE-2022-2806
Fixed in a distro release EPSS <1%
It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev
Products: sos_project sos, ovirt log_collector
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | sosreport | 4.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhev manager 4.4 el8 | ovirt-engine | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-backend | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-dbscripts | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-health-check-bundler | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-restapi | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-base | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-cinderlib | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-imageio | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-ovirt-engine | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-ovirt-engine-common | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-vmconsole-proxy-helper | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-setup-plugin-websocket-proxy | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-tools | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-tools-backup | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-ui-extensions | 0:1.3.5-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-vmconsole-proxy-helper | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-webadmin-portal | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-websocket-proxy | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-log-collector | 0:4.4.7-2.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-web-ui | 0:1.9.1-1.el8ev |
| Red Hat rhev manager 4.4 el8 | python3-ovirt-engine-lib | 0:4.5.2.4-0.1.el8ev |
| Red Hat rhev manager 4.4 el8 | rhvm | 0:4.5.2.4-0.1.el8ev |
| Ubuntu 18.04 LTS | sosreport | 4.3-1ubuntu0.18.04.2 |
| Ubuntu 20.04 LTS | sosreport | 4.3-1ubuntu0.20.04.2 |
| Ubuntu 22.04 LTS | sosreport | 4.3-1ubuntu2.1 |
| Ubuntu Pro 14.04 LTS | sosreport | 3.5-1~ubuntu14.04.3+esm1 |
| Ubuntu Pro 16.04 LTS | sosreport | 3.9.1-1ubuntu0.16.04.2+esm1 |