| Package | Affected versions | Patched versions |
|---|---|---|
| sosreport | < 4.4 | 4.4 |
| log collector | < 4.4.7-2.el8ev | 4.4.7-2.el8ev |
| sos | < 4.2-20.el8_6 | 4.2-20.el8_6 |
It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free