Medium severity5.5GHSA Advisory· Published Sep 1, 2022· Updated Jun 17, 2026
CVE-2022-2806
CVE-2022-2806
Description
It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
sosreportPyPI | < 4.4 | 4.4 |
Affected products
4cpe:2.3:a:sos_project:sos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sos_project:sos:*:*:*:*:*:*:*:*range: <4.2-20.el8_6
- (no CPE)range: < 4.4
Patches
Vulnerability mechanics
References
4- github.com/sosreport/sos/pull/2947nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-7pf9-7cff-f854ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-2806ghsaADVISORY
- github.com/sosreport/sos/commit/5fd872c64c53af37015f366295e0c2418c969757ghsaWEB
News mentions
0No linked articles in our index yet.