CVE-2022-2806

sosreport Exposure of Sensitive Information vulnerability

5.5 MediumFix available

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.25%Down 0.6 points since Sep 2, 2022

What each source reports

NVD Score used 5.5

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Record: CVE-2022-2806
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Record: CVE-2022-2806
Weakness: CWE-200
Updated: 2026-11-02

EUVDEUVD-2022-6735 No score

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Record: EUVD-2022-6735
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7pf9-7cff-f854 5.5

sosreport Exposure of Sensitive Information vulnerability

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Record: GHSA-7pf9-7cff-f854
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

OSVAZL-10827 5.5

CVE-2022-2806 affecting package sos for versions less than 4.4-1

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Record: AZL-10827
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVGHSA-7pf9-7cff-f854 5.5

sosreport Exposure of Sensitive Information vulnerability

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Record: GHSA-7pf9-7cff-f854
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

Show 10 moreShow less

OSVOESA-2024-1564 5.5

sos security update

Sos is an extensible, portable, support data collection tool primarily aimed at Linux distributions and other UNIX-like operating systems.

Security Fix(es):

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev(CVE-2022-2806)

Record: OESA-2024-1564
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVPYSEC-2026-925 5.5

sosreport Exposure of Sensitive Information vulnerability

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Record: PYSEC-2026-925
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2022:6393 7.5

Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update

Record: RHSA-2022:6393
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2022-2806 5.5

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Record: UBUNTU-CVE-2022-2806
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVCLSA-2022-1665681071 No score

Fix CVE(s): CVE-2022-2806

SECURITY UPDATE: Exposed sensitive information
- debian/patches/CVE-2022-2806.patch: filter out all password keys in sos/report/plugins/ovirt.py
- CVE-2022-2806

Record: CLSA-2022-1665681071
Updated: 2026-11-02

OSVCLSA-2026-1779212011 No score

sos: Fix of CVE-2022-2806

CVE-2022-2806: ovirt plugin: filter out all password keys in answer files

Record: CLSA-2026-1779212011
Updated: 2026-11-02

OSVCLSA-2026-1779212122 No score

sos: Fix of CVE-2022-2806

CVE-2022-2806: ovirt plugin: filter out all password keys in answer files

Record: CLSA-2026-1779212122
Updated: 2026-11-02

OSVCLSA-2026-1779296233 No score

sos: Fix of CVE-2022-2806

CVE-2022-2806: ovirt plugin: filter out all password keys in answer files

Record: CLSA-2026-1779296233
Updated: 2026-11-02

OSVMGASA-2022-0373 No score

Updated sos packages fix security vulnerability

SoS incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information. (CVE-2022-2806)

Record: MGASA-2022-0373
Updated: 2026-11-02

OSVUSN-5636-1 No score

sosreport vulnerability

It was discovered that SoS incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information.

Record: USN-5636-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`sosreport` PyPI	before 4.4	4.4
`sos` Azure Linux:2	before 4.4-1	4.4-1
`sosreport` TuxCare:Ubuntu:16.04	before 3.9.1-1ubuntu0.16.04.2+tuxcare.els1	3.9.1-1ubuntu0.16.04.2+tuxcare.els1
`sos` TuxCare:CentOS:7	before 3.9-5.el7.12.tuxcare.els1	3.9-5.el7.12.tuxcare.els1
`sos` TuxCare:RHEL:7	before 3.9-5.el7_9.12.tuxcare.els1	3.9-5.el7_9.12.tuxcare.els1
`sos` TuxCare:OracleLinux:7	before 3.9-5.0.30.el7_9.10.tuxcare.els1	3.9-5.0.30.el7_9.10.tuxcare.els1
`sosreport` PyPI	before 4.4, plus listed versions 3.23.2.0a1	4.4
`sos` Mageia:8	before 4.4-1.mga8	4.4-1.mga8
`sos` openEuler:20.03-LTS-SP1	before 3.8-4.oe1	3.8-4.oe1
`sos` openEuler:20.03-LTS-SP4	before 3.8-4.oe2003sp4	3.8-4.oe2003sp4

Show 32 moreShow less

Affected packages
Package	Affected	Fixed
`sos` openEuler:22.03-LTS	before 4.0-6.oe2203sp3	4.0-6.oe2203sp3
`sos` openEuler:22.03-LTS-SP1	before 4.0-6.oe2203sp1	4.0-6.oe2203sp1
`sos` openEuler:22.03-LTS-SP2	before 4.0-6.oe2203sp2	4.0-6.oe2203sp2
`sos` openEuler:22.03-LTS-SP3	before 4.0-6.oe2203sp3	4.0-6.oe2203sp3
`ovirt-engine` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-backend` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-dbscripts` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-health-check-bundler` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-restapi` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-setup` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-setup-base` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-setup-plugin-cinderlib` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-setup-plugin-imageio` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-setup-plugin-ovirt-engine` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-setup-plugin-ovirt-engine-common` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-setup-plugin-vmconsole-proxy-helper` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-setup-plugin-websocket-proxy` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-tools` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-tools-backup` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-vmconsole-proxy-helper` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-webadmin-portal` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-engine-websocket-proxy` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`python3-ovirt-engine-lib` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`rhvm` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.5.2.4-0.1.el8ev	0:4.5.2.4-0.1.el8ev
`ovirt-web-ui` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:1.9.1-1.el8ev	0:1.9.1-1.el8ev
`ovirt-log-collector` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:4.4.7-2.el8ev	0:4.4.7-2.el8ev
`ovirt-engine-ui-extensions` Red Hat:rhev_manager:4.4:el8 From an advisory covering 6 CVEs	before 0:1.3.5-1.el8ev	0:1.3.5-1.el8ev
`sosreport` Ubuntu:Pro:14.04:LTS	before 3.5-1~ubuntu14.04.3+esm1, plus listed versions 3.0-13.1-13.1-1ubuntu13.1-1ubuntu23.1-1ubuntu2.1 Show 4 moreShow less 3.1-1ubuntu2.23.4-1~ubuntu14.04.13.5-1~ubuntu14.04.23.5-1~ubuntu14.04.3	3.5-1~ubuntu14.04.3+esm1
`sosreport` Ubuntu:Pro:16.04:LTS	before 3.9.1-1ubuntu0.16.04.2+esm1, plus listed versions 3.2-2ubuntu13.2+git276-g7da50d6-13.2+git276-g7da50d6-23.2+git276-g7da50d6-33.2+git276-g7da50d6-3build1 Show 11 moreShow less 3.2+git276-g7da50d6-3ubuntu13.4-1~ubuntu16.04.13.5-1~ubuntu16.04.23.5-1~ubuntu16.04.33.6-1ubuntu0.16.04.23.6-1ubuntu0.16.04.33.6-1ubuntu0.16.04.43.9-1ubuntu0.16.04.13.9-1ubuntu0.16.04.23.9.1-1ubuntu0.16.04.13.9.1-1ubuntu0.16.04.2	3.9.1-1ubuntu0.16.04.2+esm1
`sosreport` Ubuntu:18.04:LTS	before 4.3-1ubuntu0.18.04.2, plus listed versions 3.4-13.5-13.5-1ubuntu13.5-1ubuntu23.5-1ubuntu3 Show 14 moreShow less 3.5-1ubuntu3.18.04.13.6-1ubuntu0.18.04.23.6-1ubuntu0.18.04.33.6-1ubuntu0.18.04.43.9-1ubuntu0.18.04.13.9-1ubuntu0.18.04.23.9-1ubuntu0.18.04.33.9.1-1ubuntu0.18.04.13.9.1-1ubuntu0.18.04.23.9.1-1ubuntu0.18.04.34.1-1ubuntu0.18.04.14.1-1ubuntu0.18.04.24.1-1ubuntu0.18.04.34.3-1ubuntu0.18.04.1	4.3-1ubuntu0.18.04.2
`sosreport` Ubuntu:20.04:LTS	before 4.3-1ubuntu0.20.04.2, plus listed versions 3.6-1ubuntu33.8-1ubuntu13.8-1ubuntu23.8-1ubuntu33.9-1ubuntu1 Show 12 moreShow less 3.9-1ubuntu23.9-1ubuntu2.13.9.1-1ubuntu0.20.04.13.9.1-1ubuntu0.20.04.24.0-1~ubuntu0.20.04.14.0-1~ubuntu0.20.04.24.0-1~ubuntu0.20.04.34.1-1ubuntu0.20.04.14.1-1ubuntu0.20.04.24.1-1ubuntu0.20.04.34.2-1ubuntu0.20.04.14.3-1ubuntu0.20.04.1	4.3-1ubuntu0.20.04.2
`sosreport` Ubuntu:22.04:LTS	before 4.3-1ubuntu2.1, plus listed versions 4.1-1ubuntu24.1-1ubuntu34.2-1ubuntu24.3-1ubuntu14.3-1ubuntu2	4.3-1ubuntu2.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-2806 is a medium vulnerability (CVSS 5.5) in Sos Project Sos, published September 1, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in sosreport 4.4.

References

Show 55 moreShow less