Red Hat Security Advisory

RHSA-2022:8502

RHV Manager (ovirt-engine) [ovirt-4.5.3] bug fix and security update

Released 2022-11-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4 ovirt-engine-4.5.3.2-1.el8ev, ovirt-engine-backend-4.5.3.2-1.el8ev, ovirt-engine-dbscripts-4.5.3.2-1.el8ev +22

TI-2022-00097 CVE-2022-0155 · GHSA-74fj-2j2h-c42q

LOW 34

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02608 Published 2022-01-10 Partial fix · 1.14.7 CWE-359

TI-2022-02600 CVE-2022-2805 · GHSA-r2ff-gw5r-6x3q

LOW 29

A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00493 Published 2022-10-19 Fixed CWE-312