CVE Feed

    Dashboard / CVE / CVE-2022-2805

    CVE-2022-2805

    A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss.

    Published:May 27, 2022
    Last Modified:May 9, 2025
    EPS:Oct 19, 2022
    EPSS Score:0.00077
    CVSS Score:6.5

    Affected Products

    Vendor
    Redhat
    Product
    Rhev Manager
    Vendor
    Redhat
    Product
    Virtualization

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-37 Retrieve Embedded Sensitive Data

    Related CVEs

    CVE-2024-0822 (CVSS 7.5) — An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in th…
    CVE-2023-20861 (CVSS 6.5) — In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsuppor…
    CVE-2023-20860 (CVSS 7.5) — Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security co…
    CVE-2022-41946 (CVSS 4.7) — pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `Prepa…
    CVE-2022-45047 (CVSS 9.8) — Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java…
    CVE-2022-31129 (CVSS 7.5) — moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected vers…
    CVE-2022-31051 (CVSS 4.4) — semantic-release is an open source npm package for automated version management and package publishing. In aff…
    CVE-2022-2806 (CVSS 5.5) — It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-…
    CVE-2022-24903 (CVSS 8.1) — Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buf…
    CVE-2022-22950 (CVSS 6.5) — n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provid…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High