CVE-2022-0207

2022-08-2618:15:08

CWE-362

[email protected]

web.nvd.nist.gov

race condition

sensitive values

log files

clear text

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

17.5%

JSON

A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.

Affected configurations

Nvd

Node

ovirtvdsmRange4.30.1–4.50.0.4

Node

redhatenterprise_linuxMatch8.0

AND

redhatvirtualizationMatch4.0

redhatvirtualization_for_ibm_power_little_endianMatch4.0

redhatvirtualization_hostMatch4.0

VendorProductVersionCPE
ovirtvdsm*cpe:2.3:a:ovirt:vdsm:*:*:*:*:*:*:*:*
redhatenterprise_linux8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhatvirtualization4.0cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*
redhatvirtualization_for_ibm_power_little_endian4.0cpe:2.3:a:redhat:virtualization_for_ibm_power_little_endian:4.0:*:*:*:*:*:*:*
redhatvirtualization_host4.0cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ovirt	vdsm	*	cpe:2.3:a:ovirt:vdsm::::::::
redhat	enterprise_linux	8.0	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
redhat	virtualization	4.0	cpe:2.3:a:redhat:virtualization:4.0:::::::*
redhat	virtualization_for_ibm_power_little_endian	4.0	cpe:2.3:a:redhat:virtualization_for_ibm_power_little_endian:4.0:::::::*
redhat	virtualization_host	4.0	cpe:2.3:a:redhat:virtualization_host:4.0:::::::*