CVE-2022-2805

CVE-2022-2805 is a medium-severity vulnerability affecting Red Hat Virtualization (ovirt-engine) where plaintext passwords are logged in a log file when using otapi-style. An attacker with sufficient privileges could read these logs, leading to a loss of confidentiality. The vulnerability has a CVSS score of 6.5, indicating a network attack vector with low complexity, requiring low privileges to achieve high confidentiality impact. There is no evidence of active exploitation, nor is exploit code publicly available on platforms like Metasploit or ExploitDB, and it has garnered minimal community discussion or media coverage.