← Retour aux CVEs

CVE-2022-0207

MEDIUM

4.7

Description

A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.

Details CVE

Score CVSS v3.14.7

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Vecteur d'attaqueLOCAL

ComplexiteHIGH

Privileges requisLOW

Interaction utilisateurNONE

Publie8/26/2022

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

ovirt:vdsmredhat:enterprise_linuxredhat:virtualizationredhat:virtualization_for_ibm_power_little_endianredhat:virtualization_host

Faiblesses (CWE)

CWE-362CWE-362

References

https://access.redhat.com/security/cve/CVE-2022-0207(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=2033697(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=2039248(secalert@redhat.com)

https://gerrit.ovirt.org/c/vdsm/+/118025(secalert@redhat.com)

https://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=53b0036fc72d3b8877d4e7f047d705e5a4c722e8(secalert@redhat.com)

https://access.redhat.com/security/cve/CVE-2022-0207(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=2033697(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=2039248(af854a3a-2127-422b-91ae-364da2661108)

https://gerrit.ovirt.org/c/vdsm/+/118025(af854a3a-2127-422b-91ae-364da2661108)

https://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=53b0036fc72d3b8877d4e7f047d705e5a4c722e8(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.