CVE-2022-2806: Ovirt Log Collector

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev

Affected products

• Ovirt Log Collector: before 4.4.7-2.el8ev (fixed in 4.4.7-2.el8ev)
• Sos Project Sos: before 4.2-20.el8_6 (fixed in 4.2-20.el8_6)

Published 2022-09-01. Last modified 2026-06-17.