CVE-2022-0207

A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.

Score

CVSS 3.1 4.7 Medium

Status

Modified - secalert@redhat.com

Published

2022-08-26

Last modified

2024-08-02

Weaknesses

CWE-362

Affected products

• Vdsm (Ovirt)
• Virtualization (Redhat)
• Virtualization For Ibm Power Little Endian (Redhat)
• Virtualization Host (Redhat)

References

• https://access.redhat.com/security/cve/CVE-2022-0207
• https://bugzilla.redhat.com/show_bug.cgi?id=2033697
• https://bugzilla.redhat.com/show_bug.cgi?id=2039248
• https://gerrit.ovirt.org/c/vdsm/+/118025
• https://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=53b0036fc72d3b8877d4e7f047d705e5a4c722e8