PT-2022-14031

Name of the Vulnerable Software and Affected Versions convert2rhel affected versions not specified Description The issue concerns an ansible playbook named ansible/run-convert2rhel.yml in convert2rhel, which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This...

CVE-2022-1662: Exposure of Sensitive Information to an Unauthorized Actor

In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This could allow unauthorized local users to view the password via the process list while convert2rhel is running. However, this...