CVE-2022-0852

CVE-2022-0852 concerns the convert2rhel utility, where a Red Hat account password is passed to subscription-manager via the command line. Connectors note that local attackers on a system with the affected convert2rhel can view the password in process command lines (e.g., via htop/ps), risking con...

CVE-2022-0851

CVE-2022-0851 concerns convert2rhel exposing the activation key in process command lines when passing it to subscription-manager. Public docs tie this to the Convert2RHEL utility and indicate an exposure that could enable fraud via registering systems using the victim’s activation key. Red Hat ad...

CVE-2022-1662

In CVE-2022-1662, the issue is that an Ansible playbook (ansible/run-convert2rhel.yml) for convert2rhel passes the Red Hat Subscription Manager password via the CLI, enabling unauthorized local users to view the password in the process list during execution. This affects convert2rhel when the ups...