Most recent entries from all

EUVD-2026-12523

fkie_cve-2022-2806

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

GHSA-7pf9-7cff-f854 — sosreport Exposure of Sensitive Information vulnerability

Affected: PyPI: sosreport

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

gsd-2022-2806

msrc_CVE-2022-2806 — It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el…

msrc_CVE-2022-2806

OESA-2024-1564 — sos security update

Affected: openEuler:20.03-LTS-SP1: sos, openEuler:20.03-LTS-SP4: sos, openEuler:22.03-LTS: sos, openEuler:22.03-LTS-SP1: sos, openEuler:22.03-LTS-SP2: sos, openEuler:22.03-LTS-SP3: sos

Sos is an extensible, portable, support data collection tool primarily aimed at Linux distributions and other UNIX-like operating systems. Security Fix(es): It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev(CVE-2022-2806)

PYSEC-2026-925 — sosreport Exposure of Sensitive Information vulnerability

Affected: PyPI: sosreport

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

RHSA-2022:6393 — Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update

jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods springframework: malicious input leads to insertion of additional log entries nodejs-underscore: Arbitrary code execution via the template function ovirt-log-collector: RHVM admin password is logged unfiltered moment: inefficient parsing algorithm resulting in DoS

UBUNTU-CVE-2022-2806

Affected: Ubuntu:Pro:14.04:LTS: sosreport, Ubuntu:Pro:16.04:LTS: sosreport, Ubuntu:18.04:LTS: sosreport, Ubuntu:20.04:LTS: sosreport, Ubuntu:22.04:LTS: sosreport

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev