VDB
RHSA-2024%3A10518
RHSA-2024%3A10518
PUBLISHED
CVSS 6 MEDIUM
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.
Risk Scores
CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-kube-proxy-rhel9@sha256:aad67d775769f0aa3b8b33f178e30586fcb4f5d461a760c13f0c41ddfc1bd1d9_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-kube-proxy-rhel9@sha256:aad67d775769f0aa3b8b33f178e30586fcb4f5d461a760c13f0c41ddfc1bd1d9_ppc64le |
| Red Hat | openshift4/ose-operator-registry-rhel9@sha256:86bfb6c17e70a6bb404d5e0cfdf14bf2da4ca65c35c5b492cdb0a9badba4e0ac_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-operator-registry-rhel9@sha256:86bfb6c17e70a6bb404d5e0cfdf14bf2da4ca65c35c5b492cdb0a9badba4e0ac_ppc64le |
| Red Hat | openshift4/ose-cluster-authentication-rhel9-operator@sha256:3f9c86578808a8fcd23dcde4847ea84b580d8f12d9fdee62b8983df1e64904c6_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-authentication-rhel9-operator@sha256:3f9c86578808a8fcd23dcde4847ea84b580d8f12d9fdee62b8983df1e64904c6_arm64 |
| Red Hat | openshift4/ose-csi-external-snapshotter-rhel9@sha256:9a1c9937b615677a9f780800fd1b61fc94b86f9e9b92356c9f1b0cf66470bc2c_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-csi-external-snapshotter-rhel9@sha256:9a1c9937b615677a9f780800fd1b61fc94b86f9e9b92356c9f1b0cf66470bc2c_s390x |
| Red Hat | openshift4/ose-cluster-api-rhel9@sha256:2949e82b3eeb6fb99b17d6b77496cd3647d50d76541cfdf4810b77afe7529008_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-api-rhel9@sha256:2949e82b3eeb6fb99b17d6b77496cd3647d50d76541cfdf4810b77afe7529008_amd64 |
| Red Hat | openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator@sha256:b8be23eaa957eabec51d8df3c3cd297d651a0aa94f87bf376688ab98a9c6a0eb_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
| Red Hat | openshift4/ose-cluster-monitoring-rhel9-operator@sha256:86c4bdb4ad3ebee5d4bc94313ca35628ff3578c9c2cb128d1cead7388ccd0643_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-monitoring-rhel9-operator@sha256:86c4bdb4ad3ebee5d4bc94313ca35628ff3578c9c2cb128d1cead7388ccd0643_ppc64le |
| Red Hat | openshift4/ose-cluster-etcd-rhel9-operator@sha256:d679398025727a62f8de0acf74205951aa497ba6af8c10f3b402bd39445e77f3_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-etcd-rhel9-operator@sha256:d679398025727a62f8de0acf74205951aa497ba6af8c10f3b402bd39445e77f3_arm64 |
| Red Hat | openshift4/ose-prometheus-rhel9@sha256:556b638a98ecca9a9b51b1ab9775891097c81233680585b5731ccdb5147370db_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-prometheus-rhel9@sha256:556b638a98ecca9a9b51b1ab9775891097c81233680585b5731ccdb5147370db_ppc64le |
| Red Hat | openshift4/ose-service-ca-rhel9-operator@sha256:d7649f794d0cd572e18fa9b942a75dd799dad83d1500fd3a63c763e2bc1baf40_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-service-ca-rhel9-operator@sha256:d7649f794d0cd572e18fa9b942a75dd799dad83d1500fd3a63c763e2bc1baf40_amd64 |
| Red Hat | openshift4/ose-machine-config-rhel9-operator@sha256:6163a9a45a7a38bb7a748e3bc94e50bf01d1d1ce20ddc93f3c25933eda54e6f6_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-machine-config-rhel9-operator@sha256:6163a9a45a7a38bb7a748e3bc94e50bf01d1d1ce20ddc93f3c25933eda54e6f6_s390x |
| Red Hat | openshift4/ose-baremetal-machine-controllers-rhel9@sha256:689425a561c517be79d2d61eb80ce8fcde35e8c4bd67c5955b400f88a498268d_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-baremetal-machine-controllers-rhel9@sha256:689425a561c517be79d2d61eb80ce8fcde35e8c4bd67c5955b400f88a498268d_s390x |
| Red Hat | openshift4/ose-openshift-controller-manager-rhel9@sha256:b9d7603df39a7696c49b9c9c583ca8b53025135bcaa129514399605be2f7f626_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-openshift-controller-manager-rhel9@sha256:b9d7603df39a7696c49b9c9c583ca8b53025135bcaa129514399605be2f7f626_s390x |
| Red Hat | openshift4/ose-cluster-capi-rhel9-operator@sha256:aac8b5f91bc48559ebab1896aefc9605a2759536cd5357298b604ae694e40000_s390x as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-cluster-capi-rhel9-operator@sha256:aac8b5f91bc48559ebab1896aefc9605a2759536cd5357298b604ae694e40000_s390x |
| Red Hat | openshift4/ose-hypershift-rhel9@sha256:5dfd66dae0ef09ce754ebbbb132966103e2b11461a3953cc39dbbc842be419bc_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-hypershift-rhel9@sha256:5dfd66dae0ef09ce754ebbbb132966103e2b11461a3953cc39dbbc842be419bc_arm64 |
| Red Hat | openshift4/ose-multus-route-override-cni-rhel9@sha256:6cb66d4397605b23016e4b2f9937af651231795bcfd313c595aa3b4496cae2a1_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-multus-route-override-cni-rhel9@sha256:6cb66d4397605b23016e4b2f9937af651231795bcfd313c595aa3b4496cae2a1_arm64 |
| Red Hat | openshift4/ose-networking-console-plugin-rhel9@sha256:edfa7fb35f177ef83082d7f0d5a22214a58ab5e8e250b399ac09a6087297ee81_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-networking-console-plugin-rhel9@sha256:edfa7fb35f177ef83082d7f0d5a22214a58ab5e8e250b399ac09a6087297ee81_amd64 |
| Red Hat | openshift4/ose-baremetal-machine-controllers-rhel9@sha256:dd22b2f3a255bfc872ee16ff3b3a174da6c7b8eb81b9c28cc82c50ca597d4572_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-baremetal-machine-controllers-rhel9@sha256:dd22b2f3a255bfc872ee16ff3b3a174da6c7b8eb81b9c28cc82c50ca597d4572_arm64 |
| Red Hat | openshift4/ose-kube-storage-version-migrator-rhel9@sha256:ef9c8b8f89ac5515a6ba8dd60874f9efb26e6fc78b1b31b1b18329c3c6068115_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | openshift4/ose-kube-storage-version-migrator-rhel9@sha256:ef9c8b8f89ac5515a6ba8dd60874f9efb26e6fc78b1b31b1b18329c3c6068115_arm64 |
| Red Hat | openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:59382c8559892daeaeb548e25e9d3a2c71c8923152b1d29dc91f4c4cabb541b5_s390x as a component of Red Hat OpenShift Container Platform 4.17 | * |
…and 642 more
Timeline
- Dec 3, 2024 CVE Published
- Apr 24, 2026 CVE Updated
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:10518 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2302487 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2324291 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2324550 issue
- https://issues.redhat.com/browse/OCPBUGS-42752 advisory
- https://issues.redhat.com/browse/OCPBUGS-43047 advisory
- https://issues.redhat.com/browse/OCPBUGS-43454 advisory
- https://issues.redhat.com/browse/OCPBUGS-43795 advisory
- https://issues.redhat.com/browse/OCPBUGS-43800 advisory
- https://issues.redhat.com/browse/OCPBUGS-44183 advisory
- https://issues.redhat.com/browse/OCPBUGS-44190 advisory
- https://issues.redhat.com/browse/OCPBUGS-44611 advisory
- https://issues.redhat.com/browse/OCPBUGS-44699 advisory
- https://issues.redhat.com/browse/OCPBUGS-44764 advisory
- https://issues.redhat.com/browse/OCPBUGS-44830 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10518.json advisory
- https://access.redhat.com/security/cve/CVE-2024-6104 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-6104 advisory
…and 16 more