CVE-2022-2805 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-2805 PUBLISHED CVSS 6.5 MEDIUM

A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attacker with sufficient privileges to read the log file, leading to confidentiality loss.

EPSS 0.11% · 29.5th percentile

Risk Scores

CVSS v3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.11%

29.5th percentile

Affected Products

Vendor	Product	Versions
redhat	virtualization	4.0
n/a	ovirt-engine	ovirt-engine 4.5.3

Timeline

Oct 19, 2022 CVE Published
Oct 22, 2022 EPSS Score
Dec 4, 2022 EPSS Score
Jan 16, 2023 EPSS Score
Feb 28, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 12, 2023 EPSS Score
May 25, 2023 EPSS Score
Jul 7, 2023 EPSS Score
Aug 19, 2023 EPSS Score
Oct 2, 2023 EPSS Score
Nov 14, 2023 EPSS Score

References

Open in Interactive Console →