RHSA-2024%3A11562

RHSA-2024%3A11562 PUBLISHED CVSS 6 MEDIUM

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.

Risk Scores

CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Affected Products

…and 292 more

Timeline

Jan 2, 2025 CVE Published
Apr 24, 2026 CVE Updated
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2024:11562 advisory
https://access.redhat.com/security/updates/classification/#moderate advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
https://issues.redhat.com/browse/OCPBUGS-36345 advisory
https://issues.redhat.com/browse/OCPBUGS-37064 advisory
https://issues.redhat.com/browse/OCPBUGS-43669 advisory
https://issues.redhat.com/browse/OCPBUGS-43716 advisory
https://issues.redhat.com/browse/OCPBUGS-45097 advisory
https://issues.redhat.com/browse/OCPBUGS-45248 advisory
https://issues.redhat.com/browse/OCPBUGS-45330 advisory
https://issues.redhat.com/browse/OCPBUGS-45839 advisory
https://issues.redhat.com/browse/OCPBUGS-45890 advisory
https://issues.redhat.com/browse/OCPBUGS-45940 advisory
https://issues.redhat.com/browse/OCPBUGS-45950 advisory
https://issues.redhat.com/browse/OCPBUGS-45955 advisory
https://issues.redhat.com/browse/OCPBUGS-46034 advisory
https://issues.redhat.com/browse/OCPBUGS-46063 advisory
https://issues.redhat.com/browse/OCPBUGS-46149 advisory
https://issues.redhat.com/browse/OCPBUGS-46436 advisory
https://issues.redhat.com/browse/OCPBUGS-46451 advisory

…and 6 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	openshift4/ose-csi-node-driver-registrar@sha256:8c35643eb948d230de873a10491ce0ec813fabf0b1fc91caa377d8da05c35e0c_amd64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-csi-node-driver-registrar@sha256:8c35643eb948d230de873a10491ce0ec813fabf0b1fc91caa377d8da05c35e0c_amd64
Red Hat	openshift4/ose-multus-route-override-cni-rhel8@sha256:12384b771c520c2d8bc68f94f7df76191c3d5979727434aeace85c9dd06c9946_arm64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-multus-route-override-cni-rhel8@sha256:12384b771c520c2d8bc68f94f7df76191c3d5979727434aeace85c9dd06c9946_arm64
Red Hat	openshift4/ose-cli@sha256:c88c72b423082cdeca89a218aade61fa79b8cad698d9b7d404965104c31b7bbd_amd64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-cli@sha256:c88c72b423082cdeca89a218aade61fa79b8cad698d9b7d404965104c31b7bbd_amd64
Red Hat	openshift4/egress-router-cni-rhel8@sha256:b79c371827755180339c48bc67b808bff49f5e421d69adf8ecc6dc68866607d7_arm64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/egress-router-cni-rhel8@sha256:b79c371827755180339c48bc67b808bff49f5e421d69adf8ecc6dc68866607d7_arm64
Red Hat	openshift4/ose-tools-rhel8@sha256:2d6ca2741400616767e9c79d3227427f849b7e076e79a53620bdaf6abd83f03b_amd64 as a component of Red Hat OpenShift Container Platform 4.15	*
Red Hat	openshift4/ose-csi-driver-manila-rhel8-operator@sha256:a416ec87def0755331da76961ef427532ff673aa03acf889a227a3ed7312de02_amd64 as a component of Red Hat OpenShift Container Platform 4.15	*
Red Hat	openshift4/ose-agent-installer-orchestrator-rhel8@sha256:779a7003e79ee4b4604a9e9a3d0a6f318bbb4f594d13da46f2ea99fd48d54b80_ppc64le as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-agent-installer-orchestrator-rhel8@sha256:779a7003e79ee4b4604a9e9a3d0a6f318bbb4f594d13da46f2ea99fd48d54b80_ppc64le
Red Hat	openshift4/ose-csi-node-driver-registrar-rhel8@sha256:d5712d0b7388fcb0bd2ded19dcd4279fea203494dd56571d79061eb9c9e25684_ppc64le as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-csi-node-driver-registrar-rhel8@sha256:d5712d0b7388fcb0bd2ded19dcd4279fea203494dd56571d79061eb9c9e25684_ppc64le
Red Hat	openshift4/ose-multus-route-override-cni-rhel8@sha256:86eb9d86bfd96332486fd11055d9a4539b96da5300cf6333aff779e4ec1725e4_s390x as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-multus-route-override-cni-rhel8@sha256:86eb9d86bfd96332486fd11055d9a4539b96da5300cf6333aff779e4ec1725e4_s390x
Red Hat	openshift4/ose-container-networking-plugins-rhel8@sha256:fdc79e8ff87a0f34098eb5cbbd50b91cc9a87520c855aea2d0ed9c56b8d220c6_ppc64le as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-container-networking-plugins-rhel8@sha256:fdc79e8ff87a0f34098eb5cbbd50b91cc9a87520c855aea2d0ed9c56b8d220c6_ppc64le
Red Hat	openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:32337c2b37f934613acb14e5ec4746425ae40dbca546bd85d7f9068fff94a46a_amd64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-gcp-pd-csi-driver-operator-rhel8@sha256:32337c2b37f934613acb14e5ec4746425ae40dbca546bd85d7f9068fff94a46a_amd64
Red Hat	openshift4/ose-openstack-cluster-api-controllers-rhel8@sha256:873fc5a2d717038d4a17b0c8b81a900ea16a3807d2a2f863eb43eadebe409d1c_amd64 as a component of Red Hat OpenShift Container Platform 4.15	*
Red Hat	openshift4/ose-agent-installer-orchestrator-rhel8@sha256:9f03aed678f29a86dc65d44f97f89e8d4145078ddf7303f45f5404b1aadf482c_arm64 as a component of Red Hat OpenShift Container Platform 4.15	*
Red Hat	openshift4/ose-agent-installer-api-server-rhel8@sha256:25bdc5e6aef2bf25b17e1bc6f2f5cac70b73cc2dac81af30f1d5c8811bcf11d3_ppc64le as a component of Red Hat OpenShift Container Platform 4.15	*
Red Hat	openshift4/ose-machine-config-operator@sha256:0ff0391d3235667e146f30099dd67e545cd7d6900f68e38454775f90e0b66dec_amd64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-machine-config-operator@sha256:0ff0391d3235667e146f30099dd67e545cd7d6900f68e38454775f90e0b66dec_amd64
Red Hat	openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:c33d15d89fe90fe0701cb16eab74265cba013574b520cf49cebad9e36971669a_ppc64le as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-csi-driver-shared-resource-operator-rhel8@sha256:c33d15d89fe90fe0701cb16eab74265cba013574b520cf49cebad9e36971669a_ppc64le
Red Hat	openshift4/ose-deployer@sha256:44980191df1ab13a0da3e737de1d86b4b8b10e23b1640eebfe4bf0756543da41_amd64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-deployer@sha256:44980191df1ab13a0da3e737de1d86b4b8b10e23b1640eebfe4bf0756543da41_amd64
Red Hat	openshift4/ose-csi-external-resizer-rhel8@sha256:5866898f3a1ac50a3512223c0caf8709d5857ea7b8038b430a9503ea20579905_arm64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-csi-external-resizer-rhel8@sha256:5866898f3a1ac50a3512223c0caf8709d5857ea7b8038b430a9503ea20579905_arm64
Red Hat	openshift4/ose-console@sha256:58a41001d0fa6c125d6442a78fd5728b271cfe9b924772ad1ddeb0eeb3280749_ppc64le as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-console@sha256:58a41001d0fa6c125d6442a78fd5728b271cfe9b924772ad1ddeb0eeb3280749_ppc64le
Red Hat	openshift4/ose-console-rhel9-operator@sha256:15ee1ee21e5c1f0dbae1edda8d34fd7e91eba1335b28c9382f5a36726f15afa0_amd64 as a component of Red Hat OpenShift Container Platform 4.15	openshift4/ose-console-rhel9-operator@sha256:15ee1ee21e5c1f0dbae1edda8d34fd7e91eba1335b28c9382f5a36726f15afa0_amd64