CVE-2022-0852 Information disclosure in convert2rhel
Local attackers can view Red Hat account passwords in process lists, potentially compromising system integrity and confidentiality.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-0852?
CVE-2022-0852 is a medium-severity vulnerability in Redhat Enterprise Linux, published on 29 Aug 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the password via the process command line via e.g. htop or ps. The specific impact varies upon the privileges of the Red Hat account in question, but it could affect the integrity, availability, and/or data confidentiality of other systems that are administered by that account. This occurs regardless of how the password is supplied to convert2rhel.
Which versions are affected by CVE-2022-0852?
It affects 2 products.
Linux distribution packages (3)
convert2rhel Red Hat:convert2rhel::el6 | All versions | 0:0.25-4.el6 |
convert2rhel Red Hat:convert2rhel::el7 | All versions | 0:0.25-4.el7 |
convert2rhel Red Hat:convert2rhel::el8 | All versions | 0:0.25-4.el8 |
Products include Convert2rhel Project Convert2rhel, Redhat Enterprise Linux.
How do I fix CVE-2022-0852?
Apply the vendor's patch.
Is CVE-2022-0852 being exploited?
There is no known exploitation of CVE-2022-0852 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux
Sources
Also known as GHSA-fjvj-w876-8mc2, RHSA-2022:1599, RHSA-2022:1617, RHSA-2022:1618.