TI-2022-02601 CVE-2022-2806 · GHSA-7pf9-7cff-f854
Information disclosure in ovirt-log-collector
Priority LOW 24
It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered.
Vulnerabilities
3 records
TI-2015-06262 CVE-2015-7529 · GHSA-3g56-2hh3-35ph
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport…
Priority LOW 34
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$da…
TI-2015-02802 CVE-2015-3171 · GHSA-gw46-8559-cggp
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local…
Priority LOW 25
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.