VDB

RHSA-2024%3A5160

RHSA-2024%3A5160 PUBLISHED CVSS 6 MEDIUM

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.

Risk Scores

CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-ovn-kubernetes-rhel9@sha256:f5b37491c38716451a166f39aebfc94a1446b1c849056d76d7dc1a8b3ba5030c_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-ovn-kubernetes-rhel9@sha256:f5b37491c38716451a166f39aebfc94a1446b1c849056d76d7dc1a8b3ba5030c_arm64
Red Hatopenshift4/ose-console@sha256:a1611235af2ec6737eb365162ac4705f2e365bc1b184fca47e0e87d3daa39dce_s390x as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-console@sha256:a1611235af2ec6737eb365162ac4705f2e365bc1b184fca47e0e87d3daa39dce_s390x
Red Hatopenshift4/ose-docker-builder@sha256:2e288e83e6ac0f6396b7722c4e62a91a8c5b9c29df0c6804a481eeaf4fd7ee15_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-docker-builder@sha256:2e288e83e6ac0f6396b7722c4e62a91a8c5b9c29df0c6804a481eeaf4fd7ee15_amd64
Red Hatopenshift4/ose-cloud-credential-operator@sha256:399cbcb2fe6e56fbbbcf239a1f6c617ebf9b30e68c6123bebab9bd6a72da8be9_amd64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-insights-rhel9-operator@sha256:1bf0deb37279bb9366ab37f525bef7568f76ff91342a2c77f5ef33db8883da81_arm64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-console@sha256:a2671e9da1da604163f9657120b48f4cea54443cfdf254cf1ac346ccc49c59ec_amd64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-cluster-node-tuning-rhel9-operator@sha256:502fc2f761242a68582eb0eb45195e5fb6bb9bf6e60fed1ba8048798d3ee113b_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:502fc2f761242a68582eb0eb45195e5fb6bb9bf6e60fed1ba8048798d3ee113b_arm64
Red Hatopenshift4/ose-installer-artifacts@sha256:4d08d4b0f4d04b872ba6c447a936fc518d3c9451ef6867b7a9d8dc560b4208a0_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-installer-artifacts@sha256:4d08d4b0f4d04b872ba6c447a936fc518d3c9451ef6867b7a9d8dc560b4208a0_ppc64le
Red Hatopenshift4/ose-powervs-block-csi-driver-rhel9@sha256:dfb53dadb3ddcfa9eb13c45d5d26e41192b24ad6573cdb1a8c4f0085e1941fa8_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-powervs-block-csi-driver-rhel9@sha256:dfb53dadb3ddcfa9eb13c45d5d26e41192b24ad6573cdb1a8c4f0085e1941fa8_ppc64le
Red Hatopenshift4/ose-machine-os-images-rhel8@sha256:98dd7158235aaf05ba139728e29ad2f85f977d7ba472903aec2f5d2d0a459da9_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-machine-os-images-rhel8@sha256:98dd7158235aaf05ba139728e29ad2f85f977d7ba472903aec2f5d2d0a459da9_ppc64le
Red Hatopenshift4/ose-cluster-capi-rhel9-operator@sha256:85981f4816380bcd0db259dedb8172e804365f1ad52dbd296f6c89ebaaf60743_s390x as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-baremetal-installer-rhel8@sha256:9010659a021411365862e212a833f9a468eb72db9ba2c3977026c0f03afd1eaf_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-baremetal-installer-rhel8@sha256:9010659a021411365862e212a833f9a468eb72db9ba2c3977026c0f03afd1eaf_amd64
Red Hatopenshift4/ose-cluster-node-tuning-rhel9-operator@sha256:179a9fd0dc6fac89aa7493a69b16d60bba36b5dea57eaec39a681f226a79b8ee_s390x as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:179a9fd0dc6fac89aa7493a69b16d60bba36b5dea57eaec39a681f226a79b8ee_s390x
Red Hatrhcos@sha256:11491534319a1bb8d567ad546f225d0f446e099b1c70b21ba9beed1f64fb1eb3_s390x as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-cluster-node-tuning-rhel9-operator@sha256:d3e44ea62a3ccf94acc4f2a8af1f708f01bb831193f4979ea276a9b6c17e84c1_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:d3e44ea62a3ccf94acc4f2a8af1f708f01bb831193f4979ea276a9b6c17e84c1_ppc64le
Red Hatopenshift4/ose-installer-altinfra-rhel8@sha256:074f0ef617d1df4a7b90b94a299f4771df4ea2c21878fd8928af7e42ce58605c_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-installer-altinfra-rhel8@sha256:074f0ef617d1df4a7b90b94a299f4771df4ea2c21878fd8928af7e42ce58605c_ppc64le
Red Hatopenshift4/ose-cluster-network-rhel9-operator@sha256:3916aa3ec018e4c67c4d27d1212a855a9ac2a0b764dbb047b64026e84d8990b7_s390x as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cluster-network-rhel9-operator@sha256:3916aa3ec018e4c67c4d27d1212a855a9ac2a0b764dbb047b64026e84d8990b7_s390x
Red Hatopenshift4/ose-cluster-network-rhel9-operator@sha256:f95d16a124ab6640404000bfb769d737fed385fd5c532813dc222b22fc2457fb_arm64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-ovn-kubernetes-rhel9@sha256:4bccb78431d6c709a6c2b140801f0576cd4895931e22aa6328d5ed4f9f875c34_s390x as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-machine-os-images-rhel8@sha256:35fbfb71a661a544dc32c97b16ce2b3062a2ed043d39a26818f52dd8ed48a732_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-machine-os-images-rhel8@sha256:35fbfb71a661a544dc32c97b16ce2b3062a2ed043d39a26818f52dd8ed48a732_arm64

…and 64 more

Timeline

  • Aug 15, 2024 CVE Published
  • Apr 24, 2026 CVE Updated
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›