CVE-2022-0207

mediumpriority · track · 19EPSS 0.002 · 9 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.19% (9th) EPSS

CVSS 4.7 · medium

Is it mine?

52 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · redhat_csaf

EPSS · scored 2026-10-27

A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedvdsm-0:4.50.0.13-1.el8ev.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-0:4.50.0.13-1.el8ev.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-0:4.50.0.13-1.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-0:4.50.0.13-1.el8ev.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-api-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-client-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-common-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-gluster-0:4.50.0.13-1.el8ev.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-checkips-0:4.50.0.13-1.el8ev.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-checkips-0:4.50.0.13-1.el8ev.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-checkips-0:4.50.0.13-1.el8ev.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-cpuflags-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-cpuflags-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-ethtool-options-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-ethtool-options-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-extra-ipv4-addrs-0:4.50.0.13-1.el8ev.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-extra-ipv4-addrs-0:4.50.0.13-1.el8ev.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-extra-ipv4-addrs-0:4.50.0.13-1.el8ev.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-fcoe-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-fcoe-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-localdisk-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-localdisk-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-nestedvt-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-nestedvt-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-openstacknet-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-openstacknet-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-vhostmd-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8redhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-hook-vhostmd-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-http-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-jsonrpc-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-network-0:4.50.0.13-1.el8ev.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-network-0:4.50.0.13-1.el8ev.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-python-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764
Fixedvdsm-yajsonrpc-0:4.50.0.13-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsredhat_csaf
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
https://access.redhat.com/errata/RHSA-2022:4764

cvss

Technical severity, 0–10. One row per scoring source.

4.7

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 3.8–4.7

v3.14.7mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 1 · impact 3.6

v3.14.3mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.13.8lowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:Nsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-362USCWE-362US

affected products (52)

Products and version ranges known to be affected.

n/a vdsm≤ Fixed in v4.50.0.4enisa_euvdEU
ovirt vdsm4.30.1 → 4.50.0.4nvdUScpe:2.3:a:ovirt:vdsm:*:*:*:*:*:*:*:*
redhat virtualization= 4.0nvdUScpe:2.3:a:redhat:virtualization:*:*:*:*:*:*:*:*
redhat virtualization for ibm power little endian= 4.0nvdUScpe:2.3:a:redhat:virtualization_for_ibm_power_little_endian:*:*:*:*:*:*:*:*
redhat virtualization host= 4.0nvdUScpe:2.3:a:redhat:virtualization_host:*:*:*:*:*:*:*:*
cockpit-ovirt-0:0.16.0-1.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
cockpit-ovirt-dashboard-0:0.16.0-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
mom-0:0.6.2-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
mom-0:0.6.2-1.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
ovirt-host-0:4.5.0-3.el8ev.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
ovirt-host-0:4.5.0-3.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
ovirt-host-0:4.5.0-3.el8ev.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
ovirt-host-dependencies-0:4.5.0-3.el8ev.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
ovirt-host-dependencies-0:4.5.0-3.el8ev.x86_64 as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
ovirt-hosted-engine-ha-0:2.5.0-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
ovirt-hosted-engine-ha-0:2.5.0-1.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
ovirt-hosted-engine-setup-0:2.6.3-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
ovirt-hosted-engine-setup-0:2.6.3-1.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsnot affectedredhat_csafUS
vdsm-0:4.50.0.13-1.el8ev.ppc64le as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hostsall versionsfixedredhat_csafUS
vdsm-0:4.50.0.13-1.el8ev.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8all versionsfixedredhat_csafUS

showing 20 of 52

advisories (1)

Vendor and ecosystem advisories describing this.

RHSA-2022:4764Red Hat Security Advisory: RHV RHEL Host (ovirt-host) [ovirt-4.5.0] security update2022-05-26csaf · redhat_csafUS
Updated host packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd redhat_csaf NVD CVE.org MITRE

published 2022-08-26modified 2026-06-17

references (24)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan