CVE-2022-0207

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

A race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that may lead to values being stored in clear text.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-362

Affected software

Vendor	Product	Versions
n/a	vdsm	Fixed in v4.50.0.4

References

https://access.redhat.com/security/cve/CVE-2022-0207Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2033697Issue Tracking, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2039248Issue Tracking, Third Party Advisory
https://gerrit.ovirt.org/c/vdsm/+/118025Patch, Vendor Advisory
https://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=53b0036fc72d3b8877d4e7f047d705e5a4c722e8
https://access.redhat.com/security/cve/CVE-2022-0207Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2033697Issue Tracking, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2039248Issue Tracking, Third Party Advisory
https://gerrit.ovirt.org/c/vdsm/+/118025Patch, Vendor Advisory
https://gerrit.ovirt.org/gitweb?p=vdsm.git%3Ba=commit%3Bh=53b0036fc72d3b8877d4e7f047d705e5a4c722e8

Timeline

Published: Aug 26, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-02086.1The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting it back in the "Bad CVE-2022-02094.8The Mitsol Social Post Feed WordPress plugin before 1.11 does not escape some of its settings before outputting them back in attributes, whi CVE-2022-02104.8The Random Banner WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the category parameter foun CVE-2022-02114.8The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perfo CVE-2022-02126.1The SpiderCalendar WordPress plugin through 1.5.65 does not sanitise and escape the callback parameter before outputting it back in the page CVE-2022-02136.6vim is vulnerable to Heap-based Buffer Overflow CVE-2022-02147.5The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthentica CVE-2022-02158.8The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vu CVE-2022-02164.4A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeate CVE-2022-02177.5It was discovered that an internal Prosody library to load XML based on libexpat does not properly restrict the XML features allowed in pars CVE-2022-02186.1The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme s CVE-2022-02195.5Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.