VDB
RHSA-2024%3A4321
RHSA-2024%3A4321
PUBLISHED
CVSS 6 MEDIUM
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.
Risk Scores
CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:f29c75594ebabf85c53707e9a7206a2d90106fdf221af162315f1258739c76d6_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-csr-approver-rhel8@sha256:f29c75594ebabf85c53707e9a7206a2d90106fdf221af162315f1258739c76d6_s390x |
| Red Hat | openshift4/ose-console@sha256:f354ec32667aeac5700c84f00abe9f5d5c5586b7ad4f9524224c23f784536ead_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-console@sha256:f354ec32667aeac5700c84f00abe9f5d5c5586b7ad4f9524224c23f784536ead_arm64 |
| Red Hat | openshift4/ose-installer-artifacts@sha256:80af774c6d2811ec0ded4920c6525d1e65d34be063a984c029017de57e6ff2da_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer-artifacts@sha256:80af774c6d2811ec0ded4920c6525d1e65d34be063a984c029017de57e6ff2da_s390x |
| Red Hat | openshift4/ose-olm-catalogd-rhel8@sha256:50ff3f4f3ebc3f69937a1a9c8c2920ec46215804b1726792c1b6045258d40a14_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-installer@sha256:ee42f67e799738b020a892892eaab528bc38c3ef128265be923bdcb2262cd9f4_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer@sha256:ee42f67e799738b020a892892eaab528bc38c3ef128265be923bdcb2262cd9f4_amd64 |
| Red Hat | openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:9b2561d4cf853286c0fb984dfef5553082ca0de2f8fd7d805e4b7281f2c9f805_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-openstack-cinder-csi-driver-rhel8-operator@sha256:9b2561d4cf853286c0fb984dfef5553082ca0de2f8fd7d805e4b7281f2c9f805_arm64 |
| Red Hat | openshift4/ose-cluster-ingress-rhel9-operator@sha256:ce2855c5cf88f7c8b84fbf8537846a894fa7cc5fa02ab9d66eb15dbaaac9f959_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-ingress-rhel9-operator@sha256:ce2855c5cf88f7c8b84fbf8537846a894fa7cc5fa02ab9d66eb15dbaaac9f959_ppc64le |
| Red Hat | openshift4/kubevirt-csi-driver-rhel8@sha256:14c06d1167e368e1c839ad911b853cd19aaceb0900786c8faffe0ef86b969cc6_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/kubevirt-csi-driver-rhel8@sha256:14c06d1167e368e1c839ad911b853cd19aaceb0900786c8faffe0ef86b969cc6_arm64 |
| Red Hat | openshift4/driver-toolkit-rhel9@sha256:e86afde0ec8161ccd16639225a2f5efca285509629760e63335667aefbd042ea_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/driver-toolkit-rhel9@sha256:e86afde0ec8161ccd16639225a2f5efca285509629760e63335667aefbd042ea_amd64 |
| Red Hat | openshift4/ose-prom-label-proxy@sha256:02700acf39dbde247cd12873640a4fe691875fe5b602ac7fac693517807d5dfa_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-prom-label-proxy@sha256:02700acf39dbde247cd12873640a4fe691875fe5b602ac7fac693517807d5dfa_s390x |
| Red Hat | openshift4/ose-tools-rhel8@sha256:fe818332d7d0a319226e6fc4d696357d285ce9f8dbf05768dd41cb320af60f0c_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-tools-rhel8@sha256:fe818332d7d0a319226e6fc4d696357d285ce9f8dbf05768dd41cb320af60f0c_s390x |
| Red Hat | openshift4/ose-machine-api-provider-openstack-rhel9@sha256:44c2ee07612f84ae1076803fa907b7ca51655b56fe0e2c16c515db12817708e5_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-api-provider-openstack-rhel9@sha256:44c2ee07612f84ae1076803fa907b7ca51655b56fe0e2c16c515db12817708e5_ppc64le |
| Red Hat | openshift4/ose-cluster-ingress-rhel9-operator@sha256:2efafccbfed466a8e1de14140120cbf2aa24b3ac1d2ec72e3c3f033285da57a9_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-ingress-rhel9-operator@sha256:2efafccbfed466a8e1de14140120cbf2aa24b3ac1d2ec72e3c3f033285da57a9_arm64 |
| Red Hat | openshift4/ose-cli-artifacts@sha256:aae26ff4b1431073fa17580fac03fb92eaf273796bc022b847e5add5b25ce947_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cli-artifacts@sha256:aae26ff4b1431073fa17580fac03fb92eaf273796bc022b847e5add5b25ce947_arm64 |
| Red Hat | openshift4/ose-csi-external-resizer-rhel8@sha256:b846796ce3a0021a7fa7d1f71d05f38190fbf4cb7553d03c8d14487463af1b2a_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-csi-external-resizer-rhel8@sha256:b846796ce3a0021a7fa7d1f71d05f38190fbf4cb7553d03c8d14487463af1b2a_amd64 |
| Red Hat | openshift4/ose-alibaba-disk-csi-driver-operator-container-rhel8@sha256:721228fb1b63646c29ff48e0534f4e73daa2351689f87b67270b5a196950935b_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-powervs-block-csi-driver-operator-rhel8@sha256:819505fda89669232cdf0ca0063f94791fdd2a6a0fc9228dae9a0249ccf1b73c_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-powervs-block-csi-driver-operator-rhel8@sha256:819505fda89669232cdf0ca0063f94791fdd2a6a0fc9228dae9a0249ccf1b73c_amd64 |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:6566c1fbd054bda24477f78f952fc2a498938c2de79dfe464744f5586abe553f_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:6566c1fbd054bda24477f78f952fc2a498938c2de79dfe464744f5586abe553f_s390x |
| Red Hat | openshift4/ose-csi-external-provisioner-rhel8@sha256:b68d255606e021b5208ed54edec1f7aadddbd67e72133de4e76f1617b0f37b6d_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-csi-external-provisioner-rhel8@sha256:b68d255606e021b5208ed54edec1f7aadddbd67e72133de4e76f1617b0f37b6d_s390x |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel8@sha256:cec62a945af92ed5fb72f3838f38a9f7f1e7ec70abe952ffe618ca983e461a48_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-agent-installer-api-server-rhel8@sha256:cec62a945af92ed5fb72f3838f38a9f7f1e7ec70abe952ffe618ca983e461a48_s390x |
…and 292 more
Timeline
- Jul 10, 2024 CVE Published
- Apr 24, 2026 CVE Updated
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:4321 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://issues.redhat.com/browse/OCPBUGS-27221 advisory
- https://issues.redhat.com/browse/OCPBUGS-33619 advisory
- https://issues.redhat.com/browse/OCPBUGS-34156 advisory
- https://issues.redhat.com/browse/OCPBUGS-34665 advisory
- https://issues.redhat.com/browse/OCPBUGS-34912 advisory
- https://issues.redhat.com/browse/OCPBUGS-34949 advisory
- https://issues.redhat.com/browse/OCPBUGS-35552 advisory
- https://issues.redhat.com/browse/OCPBUGS-35736 advisory
- https://issues.redhat.com/browse/OCPBUGS-35749 advisory
- https://issues.redhat.com/browse/OCPBUGS-35935 advisory
- https://issues.redhat.com/browse/OCPBUGS-35988 advisory
- https://issues.redhat.com/browse/OCPBUGS-36150 advisory
- https://issues.redhat.com/browse/OCPBUGS-36151 advisory
- https://issues.redhat.com/browse/OCPBUGS-36225 advisory
- https://issues.redhat.com/browse/OCPBUGS-36258 advisory
- https://issues.redhat.com/browse/OCPBUGS-36279 advisory
- https://issues.redhat.com/browse/OCPBUGS-36287 advisory
…and 8 more