CVE-2012-2664

CVE-2012-2664 describes a vulnerability in the Red Hat sos package, specifically the sosreport utility, where it fails to remove root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when generating debugging archives. This medium-severity vulnerability (CVSS 4.3) has a network attack vector and low attack complexity, potentially allowing an unauthenticated attacker to obtain sensitive password data. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.