CVE-2022-1662

State: Published
Severity: Not scored
Published: Jul 14, 2022
Updated: Aug 3, 2024
Reserved: May 10, 2022

Description

In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This could allow unauthorized local users to view the password via the process list while convert2rhel is running. However, this ansible playbook is only an example in the upstream repository and it is not shipped in officially supported versions of convert2rhel.

Scores

The record has no CVSS score.

Weaknesses

CWE-200

Affected Products

Product	Versions
convert2rheln/a	convert2rhel 0.26 ViviAffected

References

https://bugzilla.redhat.com/show_bug.cgi?id=2083851

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.