VDB
RHSA-2024%3A6121
RHSA-2024%3A6121
PUBLISHED
CVSS 6.5 MEDIUM
A vulnerability was found in Helm that may lead to sensitive information disclosure. When the --dry-run flag is used in Helm 3, it displays values of secrets. Helm 2 just displays the fact that a secret has been created.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:92fba9bbe78486c862bf6f52be320dd74c8ac17d7b4251eb8247ac95329e49a4_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:92fba9bbe78486c862bf6f52be320dd74c8ac17d7b4251eb8247ac95329e49a4_amd64 |
| Red Hat | openshift4/ose-node-feature-discovery-rhel9@sha256:3604c5536c448f5169676e50aa72a189c9571f0708c4fa47b048d54de6d1abbb_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-node-feature-discovery-rhel9@sha256:3604c5536c448f5169676e50aa72a189c9571f0708c4fa47b048d54de6d1abbb_s390x |
| Red Hat | openshift4/metallb-rhel9@sha256:1686ec0d80bc5e655b561a2f4511504b922a447abd8aeeb15dafca8293ef5aaa_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/metallb-rhel9@sha256:1686ec0d80bc5e655b561a2f4511504b922a447abd8aeeb15dafca8293ef5aaa_amd64, openshift4/metallb-rhel9@sha256:1686ec0d80bc5e655b561a2f4511504b922a447abd8aeeb15dafca8293ef5aaa_amd64 |
| Red Hat | openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:f7ec5037348c980f43341ffcff21a8d0be388e35a52c3f119c15b5f4393e80ba_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:f7ec5037348c980f43341ffcff21a8d0be388e35a52c3f119c15b5f4393e80ba_arm64 |
| Red Hat | openshift4/ose-cluster-capacity-rhel9@sha256:df643f0201021bbecd6c8bc3b71b7d23f42d3081fef3558cf8b1eb818f099053_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-cluster-capacity-rhel9@sha256:df643f0201021bbecd6c8bc3b71b7d23f42d3081fef3558cf8b1eb818f099053_arm64, openshift4/ose-cluster-capacity-rhel9@sha256:df643f0201021bbecd6c8bc3b71b7d23f42d3081fef3558cf8b1eb818f099053_arm64 |
| Red Hat | openshift4/ose-cluster-nfd-rhel9-operator@sha256:a7591de77bb5e5d6b07139d2d95ba1d1e266f58444b2318f3a62d9a445cbf431_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-cluster-nfd-rhel9-operator@sha256:a7591de77bb5e5d6b07139d2d95ba1d1e266f58444b2318f3a62d9a445cbf431_ppc64le |
| Red Hat | openshift4/ose-node-feature-discovery-rhel9@sha256:29471763cf4173d5b82682ab7452c01b820f0d755513a683bb231c3bffb1a579_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-node-feature-discovery-rhel9@sha256:29471763cf4173d5b82682ab7452c01b820f0d755513a683bb231c3bffb1a579_ppc64le |
| Red Hat | openshift4/ose-sriov-network-device-plugin-rhel9@sha256:725fea917f68ee2adbc57c2f17365719804fd49ac55cfe02cc171b741e727669_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | openshift4/ose-helm-rhel9-operator@sha256:1c8ca861b0a57b1d47b61efb41bd441675caad085f0945d098faec7144c04002_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-helm-rhel9-operator@sha256:1c8ca861b0a57b1d47b61efb41bd441675caad085f0945d098faec7144c04002_arm64, openshift4/ose-helm-rhel9-operator@sha256:1c8ca861b0a57b1d47b61efb41bd441675caad085f0945d098faec7144c04002_arm64 |
| Red Hat | openshift4/ose-sriov-network-rhel9-operator@sha256:83ea1cb0484709d8876f4becbb381587e0034ca587ba9530fca63875b3271f3d_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | openshift4/ose-sriov-rdma-cni-rhel9@sha256:9a773c004fde2cd40e6a44f32b55f867b21a97c51aa24fe7875f200045dca0c3_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-sriov-rdma-cni-rhel9@sha256:9a773c004fde2cd40e6a44f32b55f867b21a97c51aa24fe7875f200045dca0c3_arm64 |
| Red Hat | openshift4/ose-operator-sdk-rhel9@sha256:1735233c6a88c03f94230f626ae66310595891c7dae270fd5c85fe8a9ffa28b9_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-operator-sdk-rhel9@sha256:1735233c6a88c03f94230f626ae66310595891c7dae270fd5c85fe8a9ffa28b9_ppc64le |
| Red Hat | openshift4/ose-ansible-rhel9-operator@sha256:03f83bb85eb9016a713127d2760044f988fe517cf7541dd75585963b853afc85_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-ansible-rhel9-operator@sha256:03f83bb85eb9016a713127d2760044f988fe517cf7541dd75585963b853afc85_amd64, * |
| Red Hat | openshift4/ingress-node-firewall-rhel9@sha256:50db8deca9fe2af0dd52944f7647542002091d62cd7a7b2ea940c91f18d38f62_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ingress-node-firewall-rhel9@sha256:50db8deca9fe2af0dd52944f7647542002091d62cd7a7b2ea940c91f18d38f62_s390x, openshift4/ingress-node-firewall-rhel9@sha256:50db8deca9fe2af0dd52944f7647542002091d62cd7a7b2ea940c91f18d38f62_s390x |
| Red Hat | openshift4/ose-dpu-cni-rhel9@sha256:e515d78bd35a0a6eac195844908426cf2ba789ae7273aa63f1bbd26a6861023a_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | openshift4/ose-egress-router-rhel9@sha256:7aa884be9197b9c17854aa78c2b53cf593c8a502bb20da4213067140e73dfdea_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-egress-router-rhel9@sha256:7aa884be9197b9c17854aa78c2b53cf593c8a502bb20da4213067140e73dfdea_amd64 |
| Red Hat | openshift4/ose-dpu-rhel9-operator@sha256:eaabf8309b44cf99a915c98ad552d1018a1de6e8cb04f072e02d986aacbd3bef_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-dpu-rhel9-operator@sha256:eaabf8309b44cf99a915c98ad552d1018a1de6e8cb04f072e02d986aacbd3bef_ppc64le, * |
| Red Hat | openshift4/nmstate-console-plugin-rhel9@sha256:fc6d1ce22cb8bcb3dd97ee72c1d12255031b031f5f69622aee45c44c4e7f946e_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/nmstate-console-plugin-rhel9@sha256:fc6d1ce22cb8bcb3dd97ee72c1d12255031b031f5f69622aee45c44c4e7f946e_ppc64le |
| Red Hat | openshift4/sriov-cni-rhel9@sha256:8c563f6df51143f15dd24491f6c5e28d8548b30e91b496a8ffcb22e430225456_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | openshift4/ose-ptp-rhel9-operator@sha256:47440e618636de9412b13c33f2af897b48fa1c1b14a144416b6a23a6c3124bad_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, * |
…and 362 more
Timeline
- Feb 25, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:6121 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268201 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2331720 issue
- https://issues.redhat.com/browse/OCPBUGS-23795 advisory
- https://issues.redhat.com/browse/OCPBUGS-39103 advisory
- https://issues.redhat.com/browse/OCPBUGS-39334 advisory
- https://issues.redhat.com/browse/OCPBUGS-39366 advisory
- https://issues.redhat.com/browse/OCPBUGS-39440 advisory
- https://issues.redhat.com/browse/OCPBUGS-39449 advisory
- https://issues.redhat.com/browse/OCPBUGS-39512 advisory
- https://issues.redhat.com/browse/OCPBUGS-39555 advisory
- https://issues.redhat.com/browse/OCPBUGS-39594 advisory
- https://issues.redhat.com/browse/OCPBUGS-41085 advisory
- https://issues.redhat.com/browse/OCPBUGS-41122 advisory
- https://issues.redhat.com/browse/OCPBUGS-41133 advisory
- https://issues.redhat.com/browse/OCPBUGS-41143 advisory
- https://issues.redhat.com/browse/OCPBUGS-41183 advisory
- https://issues.redhat.com/browse/OCPBUGS-41204 advisory
- https://issues.redhat.com/browse/OCPBUGS-41221 advisory
…and 31 more