CVE-2022-29550

CVE-2022-29550 describes an issue in Qualys Cloud Agent 4.8.0-49 where the "ps auxwwe" command output, potentially containing cleartext credentials from environment variables, is written to the /var/log/qualys/qualys-cloud-agent-scan.log file. This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, requiring low privileges, and leading to high confidentiality impact if the log file is exposed through specific operational practices. The vendor does not consider this a vulnerability, as the data collection is intentional and would only capture credentials on systems already susceptible to CWE-214. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.