diff --git a/sos/report/plugins/subscription_manager.py b/sos/report/plugins/subscription_manager.py
index <HASH>..<HASH> 100644
--- a/sos/report/plugins/subscription_manager.py
+++ b/sos/report/plugins/subscription_manager.py
@@ -45,8 +45,8 @@ class SubscriptionManager(Plugin, RedHatPlugin):
         self.add_cmd_output(["rct cat-cert %s" % cert for cert in certs])
 
     def postproc(self):
-        passwdreg = r"(proxy_password(\s)*=(\s)*)(.*)"
-        repl = r"\1 ********"
+        passwdreg = r"(proxy_password(\s)*=(\s)*)(\S+)\n"
+        repl = r"\1********\n"
         self.do_path_regex_sub("/etc/rhsm/rhsm.conf", passwdreg, repl)
 
 # vim: et ts=4 sw=4
[subscription_manager] scrub passwords on one line only

Fix regexp to scrub proxy_password on one line and don't
obfuscate subsequent line when the password is empty.

Closes: #<I>
Resolves: #<I>