Vulnerabilities > Convert2Rhel Project

DATE CVE VULNERABILITY TITLE RISK
2022-08-29 CVE-2022-0851 Information Exposure vulnerability in multiple products
There is a flaw in convert2rhel.
local
low complexity
convert2rhel-project redhat CWE-200
5.5
2022-08-29 CVE-2022-0852 Privacy Violation vulnerability in multiple products
There is a flaw in convert2rhel.
local
low complexity
convert2rhel-project redhat CWE-359
5.5
2022-07-14 CVE-2022-1662 Information Exposure vulnerability in Convert2Rhel Project Convert2Rhel 0.24/0.25
In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel.
local
low complexity
convert2rhel-project CWE-200
5.5