VDB
RHSA-2024%3A1549
RHSA-2024%3A1549
PUBLISHED
CVSS 6.5 MEDIUM
A vulnerability was found in Helm that may lead to sensitive information disclosure. When the --dry-run flag is used in Helm 3, it displays values of secrets. Helm 2 just displays the fact that a secret has been created.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:db4cbc0724e42f3e788a6de15af4e41ae85492bc230e01ea67b6954a08bad41c_s390x as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:db4cbc0724e42f3e788a6de15af4e41ae85492bc230e01ea67b6954a08bad41c_s390x, advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:db4cbc0724e42f3e788a6de15af4e41ae85492bc230e01ea67b6954a08bad41c_s390x |
| Red Hat | advanced-cluster-security/rhacs-collector-rhel8@sha256:d83a8ed415a0af5f5e1b92bd7eba83c94418f068c87aee3a2a6c0aa2f70cdb1c_ppc64le as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-collector-rhel8@sha256:d83a8ed415a0af5f5e1b92bd7eba83c94418f068c87aee3a2a6c0aa2f70cdb1c_ppc64le, advanced-cluster-security/rhacs-collector-rhel8@sha256:d83a8ed415a0af5f5e1b92bd7eba83c94418f068c87aee3a2a6c0aa2f70cdb1c_ppc64le |
| Red Hat | advanced-cluster-security/rhacs-collector-rhel8@sha256:686ad91f440de57326855aa496f83deb40cbaf2095eec1a20eb1c8024a1f3879_s390x as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-collector-rhel8@sha256:686ad91f440de57326855aa496f83deb40cbaf2095eec1a20eb1c8024a1f3879_s390x, advanced-cluster-security/rhacs-collector-rhel8@sha256:686ad91f440de57326855aa496f83deb40cbaf2095eec1a20eb1c8024a1f3879_s390x |
| Red Hat | advanced-cluster-security/rhacs-scanner-rhel8@sha256:9e0be36291581bd67c9e0ed2f1c204cfff143b8f37bb2d83a7e2e64901f174bd_ppc64le as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-scanner-rhel8@sha256:9e0be36291581bd67c9e0ed2f1c204cfff143b8f37bb2d83a7e2e64901f174bd_ppc64le, advanced-cluster-security/rhacs-scanner-rhel8@sha256:9e0be36291581bd67c9e0ed2f1c204cfff143b8f37bb2d83a7e2e64901f174bd_ppc64le |
| Red Hat | advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3dba7e060bd7940b58e64ddf9d5fcfa8295161bbd9ae685f75b4a98a652f0060_amd64 as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3dba7e060bd7940b58e64ddf9d5fcfa8295161bbd9ae685f75b4a98a652f0060_amd64, advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:3dba7e060bd7940b58e64ddf9d5fcfa8295161bbd9ae685f75b4a98a652f0060_amd64 |
| Red Hat | advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6f9bcb1ef6528a8fb81d8d1dfa82afbcc736a7e3d92750bf3d26aaf3fa8d7305_ppc64le as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6f9bcb1ef6528a8fb81d8d1dfa82afbcc736a7e3d92750bf3d26aaf3fa8d7305_ppc64le, advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:6f9bcb1ef6528a8fb81d8d1dfa82afbcc736a7e3d92750bf3d26aaf3fa8d7305_ppc64le |
| Red Hat | advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:a65370286ed1706fbc57b93ed628c3deea455cf0b9d68e84af1f3fd6dc3d7a5d_s390x as a component of RHACS 4.3 for RHEL 8 | *, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:a65370286ed1706fbc57b93ed628c3deea455cf0b9d68e84af1f3fd6dc3d7a5d_s390x |
| Red Hat | advanced-cluster-security/rhacs-roxctl-rhel8@sha256:06fd6c23e567a898abe781090c28d4fb21c659ecfbc3ab7be67239295979ab62_ppc64le as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-roxctl-rhel8@sha256:06fd6c23e567a898abe781090c28d4fb21c659ecfbc3ab7be67239295979ab62_ppc64le, advanced-cluster-security/rhacs-roxctl-rhel8@sha256:06fd6c23e567a898abe781090c28d4fb21c659ecfbc3ab7be67239295979ab62_ppc64le |
| Red Hat | advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:12e2005d9402116dd740f2c0bece212fc17a319862d84780d9d491cdc563e83c_s390x as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:12e2005d9402116dd740f2c0bece212fc17a319862d84780d9d491cdc563e83c_s390x, advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:12e2005d9402116dd740f2c0bece212fc17a319862d84780d9d491cdc563e83c_s390x |
| Red Hat | advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:4b2bbb4058d59241281a66bfb93f7828991c5947cc82b63812e67a2c17533824_amd64 as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:4b2bbb4058d59241281a66bfb93f7828991c5947cc82b63812e67a2c17533824_amd64, advanced-cluster-security/rhacs-collector-slim-rhel8@sha256:4b2bbb4058d59241281a66bfb93f7828991c5947cc82b63812e67a2c17533824_amd64 |
| Red Hat | advanced-cluster-security/rhacs-operator-bundle@sha256:59317dcd8a520e3840ac191c634ec808339e7ac2779652530bbe35d5206a19d3_ppc64le as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-operator-bundle@sha256:59317dcd8a520e3840ac191c634ec808339e7ac2779652530bbe35d5206a19d3_ppc64le, advanced-cluster-security/rhacs-operator-bundle@sha256:59317dcd8a520e3840ac191c634ec808339e7ac2779652530bbe35d5206a19d3_ppc64le |
| Red Hat | advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3253ba914c3e0b7a2d50d2881b475bbf4b2e78800ba590fef3a0d3c9f91ec55f_s390x as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3253ba914c3e0b7a2d50d2881b475bbf4b2e78800ba590fef3a0d3c9f91ec55f_s390x, advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:3253ba914c3e0b7a2d50d2881b475bbf4b2e78800ba590fef3a0d3c9f91ec55f_s390x |
| Red Hat | advanced-cluster-security/rhacs-operator-bundle@sha256:3fcd7214658eefa2ee8df68fa84468b88c6f967c2685de7b1dcf51ead3bd3384_s390x as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-operator-bundle@sha256:3fcd7214658eefa2ee8df68fa84468b88c6f967c2685de7b1dcf51ead3bd3384_s390x, advanced-cluster-security/rhacs-operator-bundle@sha256:3fcd7214658eefa2ee8df68fa84468b88c6f967c2685de7b1dcf51ead3bd3384_s390x |
| Red Hat | advanced-cluster-security/rhacs-rhel8-operator@sha256:4068b92d696b38aaf9a5e02d7286caf3d0b850b445c83f604693e71bd8b99fc1_amd64 as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-rhel8-operator@sha256:4068b92d696b38aaf9a5e02d7286caf3d0b850b445c83f604693e71bd8b99fc1_amd64, advanced-cluster-security/rhacs-rhel8-operator@sha256:4068b92d696b38aaf9a5e02d7286caf3d0b850b445c83f604693e71bd8b99fc1_amd64 |
| Red Hat | advanced-cluster-security/rhacs-operator-bundle@sha256:355567de35493ef1122e8a60385828c98ba62272aaf60d4ab6336466418ec6c9_amd64 as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-operator-bundle@sha256:355567de35493ef1122e8a60385828c98ba62272aaf60d4ab6336466418ec6c9_amd64, advanced-cluster-security/rhacs-operator-bundle@sha256:355567de35493ef1122e8a60385828c98ba62272aaf60d4ab6336466418ec6c9_amd64 |
| Red Hat | advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8d99d2b7f487b201f8b22b4cd208bd8708bd4024a8b71cda0a857352d8fa9519_amd64 as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8d99d2b7f487b201f8b22b4cd208bd8708bd4024a8b71cda0a857352d8fa9519_amd64, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:8d99d2b7f487b201f8b22b4cd208bd8708bd4024a8b71cda0a857352d8fa9519_amd64 |
| Red Hat | advanced-cluster-security/rhacs-main-rhel8@sha256:6cd8653ccb833a2175c5fb691ca1718a66b9885304cc15bbf14db789e17baffd_ppc64le as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-main-rhel8@sha256:6cd8653ccb833a2175c5fb691ca1718a66b9885304cc15bbf14db789e17baffd_ppc64le, * |
| Red Hat | advanced-cluster-security/rhacs-central-db-rhel8@sha256:91cdf66dc5d25146583cf884a3ccebe2103f1a3796033b821079b132ee1a4079_amd64 as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-central-db-rhel8@sha256:91cdf66dc5d25146583cf884a3ccebe2103f1a3796033b821079b132ee1a4079_amd64, advanced-cluster-security/rhacs-central-db-rhel8@sha256:91cdf66dc5d25146583cf884a3ccebe2103f1a3796033b821079b132ee1a4079_amd64 |
| Red Hat | advanced-cluster-security/rhacs-rhel8-operator@sha256:52055750c7ebac6cc8da8094476048485f2d588b13e52bc6ae2aeda27e775276_s390x as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-rhel8-operator@sha256:52055750c7ebac6cc8da8094476048485f2d588b13e52bc6ae2aeda27e775276_s390x, advanced-cluster-security/rhacs-rhel8-operator@sha256:52055750c7ebac6cc8da8094476048485f2d588b13e52bc6ae2aeda27e775276_s390x |
| Red Hat | advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:01dbb08c96001b53359e40ca056250cf3a2a601885f85164a8471960284332e2_ppc64le as a component of RHACS 4.3 for RHEL 8 | advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:01dbb08c96001b53359e40ca056250cf3a2a601885f85164a8471960284332e2_ppc64le, advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:01dbb08c96001b53359e40ca056250cf3a2a601885f85164a8471960284332e2_ppc64le |
…and 13 more
Timeline
- Mar 27, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 28, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1549 advisory
- https://access.redhat.com/security/updates/classification/#critical advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2258143 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2265440 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1549.json advisory
- https://access.redhat.com/security/cve/CVE-2019-25210 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268201 issue
- https://www.cve.org/CVERecord?id=CVE-2019-25210 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-25210 advisory
- https://github.com/helm/helm/issues/7275 advisory
- https://access.redhat.com/security/cve/CVE-2023-49569 advisory
- https://www.cve.org/CVERecord?id=CVE-2023-49569 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-49569 advisory
- https://github.com/go-git/go-git/security/advisories/GHSA-449p-3h89-pw88 advisory
- https://access.redhat.com/security/cve/CVE-2024-26147 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-26147 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-26147 advisory
- https://github.com/helm/helm/security/advisories/GHSA-r53h-jv2g-vpx6 advisory