What is RHSA-2022:8502?

RHSA-2022:8502 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.3] bug fix and security update

Which CVE IDs does RHSA-2022:8502 cover?

RHSA-2022:8502 covers the following CVE IDs: CVE-2022-0155, CVE-2022-2805. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:8502?

RHSA-2022:8502 has a CVSS v3 base score of 6.5, published by Red Hat Product Security.

Which products are affected by RHSA-2022:8502?

RHSA-2022:8502 affects 30 products, including: RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4; ovirt-engine-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4; ovirt-engine-0:4.5.3.2-1.el8ev.src as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4; ovirt-engine-backend-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4; ovirt-engine-dbscripts-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4; and others — see the full list on the advisory page.

RHSA-2022:8502MediumCVSS 6.5

Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.3] bug fix and security update

Vendor

Red Hat Product Security

Published

November 16, 2022

Last Modified

August 6, 2026

🔗 CVE IDs covered (2)

CVE-2022-0155 →CVE-2022-2805 →

📋 Description

CVE-2022-0155 — follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor CVE-2022-2805 — ovirt-engine: RHVM admin password is logged unfiltered when using otopi-style

🎯 Affected products30

RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-0:4.5.3.2-1.el8ev.src as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-backend-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-dbscripts-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-dwh-0:4.5.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-dwh-0:4.5.7-1.el8ev.src as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-dwh-grafana-integration-setup-0:4.5.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-dwh-setup-0:4.5.7-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-health-check-bundler-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-restapi-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-setup-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-setup-base-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-setup-plugin-cinderlib-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-setup-plugin-imageio-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-setup-plugin-ovirt-engine-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-setup-plugin-ovirt-engine-common-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-setup-plugin-vmconsole-proxy-helper-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-setup-plugin-websocket-proxy-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-tools-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-tools-backup-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-ui-extensions-0:1.3.6-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-ui-extensions-0:1.3.6-1.el8ev.src as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-vmconsole-proxy-helper-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-webadmin-portal-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-engine-websocket-proxy-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-web-ui-0:1.9.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
ovirt-web-ui-0:1.9.2-1.el8ev.src as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
python3-ovirt-engine-lib-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4
rhvm-0:4.5.3.2-1.el8ev.noarch as a component of RHEL-8-RHEV-S-4.4 - Red Hat Virtualization Engine 4.4

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products30

✅ Remediation

🔗 References (16)