CVE-2022-0851

Name of the Vulnerable Software and Affected Versions convert2rhel (affected versions not specified)

Description The issue is related to the use of the --activationkey option with convert2rhel, which passes the activation key to subscription-manager via the command line. This could allow unauthorized users locally on the machine to view the activation key via the process command line, using tools like htop or ps. The impact varies depending on the subscription, but it could enable an attacker to register systems purchased by the victim until discovered, resulting in a form of fraud.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.