{"id":"CVE-2022-2806","aliases":["PYSEC-2026-925"],"url":"https://o3.security/vulnerability/CVE-2022-2806","summary":"sosreport Exposure of Sensitive Information vulnerability","details":"It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev","published":"2022-09-02T00:01:01Z","modified":"2026-07-07T11:56:29.825594692Z","cvss":{"score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"sosreport","fixedVersion":"4.4"}],"fix":{"url":"https://github.com/sosreport/sos/pull/2947","label":"sosreport/sos#2947"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2806"},{"type":"WEB","url":"https://github.com/sosreport/sos/pull/2947"},{"type":"WEB","url":"https://github.com/sosreport/sos/commit/5fd872c64c53af37015f366295e0c2418c969757"},{"type":"PACKAGE","url":"https://github.com/sosreport/sos"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-07T11:56:29.825594692Z"}}