Lucene search
Veracode Vulnerability DatabaseVERACODE:36103HistoryJun 24, 2022 - 12:25 a.m.
Information Disclosure
2022-06-2400:25:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
vdsm
software
information disclosure
vulnerability
race condition
log files
sensitive values
clear text
EPSS
0.001
Percentile
17.5%
vdsm is vulnerable to information disclosure. The vulnerability exists due to a race condition allowing sensitive values in log files to be stored in clear text.
References
access.redhat.com/errata/RHSA-2022:4764
access.redhat.com/security/cve/CVE-2022-0207
access.redhat.com/security/updates/classification/#low
bugzilla.redhat.com/show_bug.cgi?id=2033697
bugzilla.redhat.com/show_bug.cgi?id=2039248
gerrit.ovirt.org/c/vdsm/+/118025
gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=53b0036fc72d3b8877d4e7f047d705e5a4c722e8
gerrit.ovirt.org/gitweb?p=vdsm.git;a=commit;h=53b0036fc72d3b8877d4e7f047d705e5a4c722e8
Related
nvd
nvd
CVE-2022-0207
2022-08-26 18:15:08
osv
osv
CVE-2022-0207
2022-08-26 18:15:08
prion
prion
Race condition
2022-08-26 18:15:00
cvelist
cvelist
CVE-2022-0207
2022-08-26 17:25:47
rosalinux
rosalinux
Advisory ROSA-SA-2024-2403
2024-04-23 11:19:21
nessus
nessus
RHEL 8 : RHV Host (ovirt-host) (RHSA-2022:4764)
2022-05-27 00:00:00
cve
cve
CVE-2022-0207
2022-08-26 18:15:08
redhatcve
redhatcve
CVE-2022-0207
2022-01-12 23:23:26
redhat
redhat