The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8502 advisory.
– follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor (CVE-2022-0155)
– ovirt-engine: RHVM admin password is logged unfiltered when using otopi-style (CVE-2022-2805)
Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.Read More