Vulnerability Details CVE-2022-0207
A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 9.2%
CVSS Severity
CVSS v3 Score 4.7
References
- https://access.redhat.com/security/cve/CVE-2022-0207
- https://bugzilla.redhat.com/show_bug.cgi?id=2033697
- https://bugzilla.redhat.com/show_bug.cgi?id=2039248
- https://gerrit.ovirt.org/c/vdsm/+/118025
- https://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=53b0036fc72d3b8877d4e7f047d705e5a4c722e8
- https://access.redhat.com/security/cve/CVE-2022-0207
- https://bugzilla.redhat.com/show_bug.cgi?id=2033697
- https://bugzilla.redhat.com/show_bug.cgi?id=2039248
- https://gerrit.ovirt.org/c/vdsm/+/118025
- https://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=53b0036fc72d3b8877d4e7f047d705e5a4c722e8
Products affected by CVE-2022-0207
-
cpe:2.3:a:ovirt:vdsm:4.30.1
-
cpe:2.3:a:ovirt:vdsm:4.30.10
-
cpe:2.3:a:ovirt:vdsm:4.30.11
-
cpe:2.3:a:ovirt:vdsm:4.30.12
-
cpe:2.3:a:ovirt:vdsm:4.30.2
-
cpe:2.3:a:ovirt:vdsm:4.30.3
-
cpe:2.3:a:ovirt:vdsm:4.30.4
-
cpe:2.3:a:ovirt:vdsm:4.30.5
-
cpe:2.3:a:ovirt:vdsm:4.30.6
-
cpe:2.3:a:ovirt:vdsm:4.30.7
-
cpe:2.3:a:ovirt:vdsm:4.30.8
-
cpe:2.3:a:ovirt:vdsm:4.30.9
-
cpe:2.3:a:ovirt:vdsm:4.40.0
-
cpe:2.3:a:redhat:virtualization:4.0
-
cpe:2.3:a:redhat:virtualization_for_ibm_power_little_endian:4.0
-
cpe:2.3:a:redhat:virtualization_host:4.0
-
cpe:2.3:o:redhat:enterprise_linux:8.0