Convert2rhel Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Convert2rhel Project records in CISA KEV

No Convert2rhel Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Convert2rhel 3 records LOW

Records

3 records

TI-2022-00758 CVE-2022-0852 · GHSA-fjvj-w876-8mc2

Exposure of resource to wrong sphere in convert2rhel

LOW 25

There is a flaw in convert2rhel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00369 Published 2022-08-29 Fixed CWE-359

TI-2022-00757 CVE-2022-0851 · GHSA-959j-7rc3-c387

Information disclosure in convert2rhel

LOW 25

There is a flaw in convert2rhel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00315 Published 2022-08-29 Fixed CWE-200

TI-2022-01532 CVE-2022-1662 · GHSA-77gc-239h-cc4p

Information disclosure in convert2rhel

LOW 24

In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0021 Published 2022-07-14 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0