VDB

RHSA-2024%3A7323

RHSA-2024%3A7323 PUBLISHED CVSS 6 MEDIUM

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.

Risk Scores

CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Affected Products

VendorProductVersions
Red Hatopenshift-logging/vector-rhel8@sha256:6b00893f59f1fda09eec0af8525da41fff2b53f00aabb2ecedf5ca63053e0504_ppc64le as a component of RHOL 5.6 for RHEL 8openshift-logging/vector-rhel8@sha256:6b00893f59f1fda09eec0af8525da41fff2b53f00aabb2ecedf5ca63053e0504_ppc64le
Red Hatopenshift-logging/elasticsearch-proxy-rhel8@sha256:555b86d23b1e0ed27a783c9009f351f51304c6229b0015fcd4d0a8304db7b870_arm64 as a component of RHOL 5.6 for RHEL 8openshift-logging/elasticsearch-proxy-rhel8@sha256:555b86d23b1e0ed27a783c9009f351f51304c6229b0015fcd4d0a8304db7b870_arm64
Red Hatopenshift-logging/opa-openshift-rhel8@sha256:df54ac4fc03aa677aa4113bdcac1a30d3128a3d584c9af3ae69e526169da6afa_s390x as a component of RHOL 5.6 for RHEL 8openshift-logging/opa-openshift-rhel8@sha256:df54ac4fc03aa677aa4113bdcac1a30d3128a3d584c9af3ae69e526169da6afa_s390x
Red Hatopenshift-logging/fluentd-rhel8@sha256:3fe7de5cf2c389cd25884d53510a9246c2bbb5ca11af74a8c8ae8207b6ffaa25_arm64 as a component of RHOL 5.6 for RHEL 8*
Red Hatopenshift-logging/logging-curator5-rhel8@sha256:61a1c5b38dd1c26892b41b35cbe6df98af084f1ba1dadf0cfd0791da8973ea47_arm64 as a component of RHOL 5.6 for RHEL 8*
Red Hatopenshift-logging/elasticsearch-proxy-rhel8@sha256:ff53c5c33b2197fede1601ca9161dcab76c9d0c560e947ec45aba5fe994e5b2f_s390x as a component of RHOL 5.6 for RHEL 8openshift-logging/elasticsearch-proxy-rhel8@sha256:ff53c5c33b2197fede1601ca9161dcab76c9d0c560e947ec45aba5fe994e5b2f_s390x
Red Hatopenshift-logging/kibana6-rhel8@sha256:1964fe3b5843e0ead6c131c34b71b6627c8d2883d4c28248f9ba28b09bc454eb_arm64 as a component of RHOL 5.6 for RHEL 8*
Red Hatopenshift-logging/log-file-metric-exporter-rhel8@sha256:4183c6ff793a71a9e6e3e8a755bbaf184689b5d1afad793036dd851f1159f3b7_ppc64le as a component of RHOL 5.6 for RHEL 8openshift-logging/log-file-metric-exporter-rhel8@sha256:4183c6ff793a71a9e6e3e8a755bbaf184689b5d1afad793036dd851f1159f3b7_ppc64le
Red Hatopenshift-logging/logging-loki-rhel8@sha256:381339489d56b457ddadf156274cf06af74c523eeb424c462dca4907e1b73f5e_arm64 as a component of RHOL 5.6 for RHEL 8openshift-logging/logging-loki-rhel8@sha256:381339489d56b457ddadf156274cf06af74c523eeb424c462dca4907e1b73f5e_arm64
Red Hatopenshift-logging/elasticsearch-proxy-rhel8@sha256:3da1c6c906eb3d76dc2ac09e596f1e76490861269a4ec329550b5a32eb979ac5_amd64 as a component of RHOL 5.6 for RHEL 8*
Red Hatopenshift-logging/cluster-logging-rhel8-operator@sha256:005077c99ee35e236ca536257e739cae8725f16529c252704137ac9c6abf7bb6_arm64 as a component of RHOL 5.6 for RHEL 8openshift-logging/cluster-logging-rhel8-operator@sha256:005077c99ee35e236ca536257e739cae8725f16529c252704137ac9c6abf7bb6_arm64
Red Hatopenshift-logging/loki-operator-bundle@sha256:6c80a1bfb222c310bcc02189e820b784dfd2b73111ab76073865f011c5ca6b41_amd64 as a component of RHOL 5.6 for RHEL 8openshift-logging/loki-operator-bundle@sha256:6c80a1bfb222c310bcc02189e820b784dfd2b73111ab76073865f011c5ca6b41_amd64
Red Hatopenshift-logging/kibana6-rhel8@sha256:28ff5eab868ca0259beaf8f0a104576acce32b24dcd6a5c20b6b749d64db08c6_amd64 as a component of RHOL 5.6 for RHEL 8openshift-logging/kibana6-rhel8@sha256:28ff5eab868ca0259beaf8f0a104576acce32b24dcd6a5c20b6b749d64db08c6_amd64
Red Hatopenshift-logging/log-file-metric-exporter-rhel8@sha256:54600eabb700d4c711cf41c996f4ae10c0f30919063030842ebb33526358746a_s390x as a component of RHOL 5.6 for RHEL 8*
Red Hatopenshift-logging/eventrouter-rhel8@sha256:90f9c186a11a93cd0aecf0dc72c1b991ac7136e022796130271c30828d60f3ff_amd64 as a component of RHOL 5.6 for RHEL 8openshift-logging/eventrouter-rhel8@sha256:90f9c186a11a93cd0aecf0dc72c1b991ac7136e022796130271c30828d60f3ff_amd64
Red Hatopenshift-logging/logging-view-plugin-rhel8@sha256:120e942f736aaec84ae29520df3d6d09562f02e693c717fb4be684b2ed9d7be4_amd64 as a component of RHOL 5.6 for RHEL 8openshift-logging/logging-view-plugin-rhel8@sha256:120e942f736aaec84ae29520df3d6d09562f02e693c717fb4be684b2ed9d7be4_amd64
Red Hatopenshift-logging/elasticsearch-proxy-rhel8@sha256:c0a275dd25754b8821e2e1da08ccbce50b77df52ac38660375a8727a948f75b8_ppc64le as a component of RHOL 5.6 for RHEL 8openshift-logging/elasticsearch-proxy-rhel8@sha256:c0a275dd25754b8821e2e1da08ccbce50b77df52ac38660375a8727a948f75b8_ppc64le
Red Hatopenshift-logging/lokistack-gateway-rhel8@sha256:9b7b7bedd62f0507ef8286f2dd3358f9feff558c6533ce05fa95932826cf40f2_arm64 as a component of RHOL 5.6 for RHEL 8openshift-logging/lokistack-gateway-rhel8@sha256:9b7b7bedd62f0507ef8286f2dd3358f9feff558c6533ce05fa95932826cf40f2_arm64
Red Hatopenshift-logging/fluentd-rhel8@sha256:94616e9c56d48e8814d2d04e7d6cc4aee70106b5ddf02b672080286179d4abd6_s390x as a component of RHOL 5.6 for RHEL 8openshift-logging/fluentd-rhel8@sha256:94616e9c56d48e8814d2d04e7d6cc4aee70106b5ddf02b672080286179d4abd6_s390x
Red Hatopenshift-logging/elasticsearch-rhel8-operator@sha256:b868bda1bf1abc1e8571fc7c08f9bcd0a9639b9cdcf458fc7b926058eb86f49c_ppc64le as a component of RHOL 5.6 for RHEL 8openshift-logging/elasticsearch-rhel8-operator@sha256:b868bda1bf1abc1e8571fc7c08f9bcd0a9639b9cdcf458fc7b926058eb86f49c_ppc64le

…and 43 more

Timeline

  • Oct 7, 2024 CVE Published
  • Apr 24, 2026 CVE Updated
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Apr 25, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›