VDB
RHSA-2024%3A8040
RHSA-2024%3A8040
PUBLISHED
CVSS 6 MEDIUM
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.
Risk Scores
CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | cluster-observability-operator/coo-prometheus-config-reloader-rhel8@sha256:56df64ea1121b2042988ebc4d96480d4e401de835c6dc40c079d845139b07261_ppc64le as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/coo-prometheus-config-reloader-rhel8@sha256:56df64ea1121b2042988ebc4d96480d4e401de835c6dc40c079d845139b07261_ppc64le, *, cluster-observability-operator/coo-prometheus-config-reloader-rhel8@sha256:56df64ea1121b2042988ebc4d96480d4e401de835c6dc40c079d845139b07261_ppc64le |
| Red Hat | cluster-observability-operator/coo-prometheus-rhel8@sha256:f3ade0e4d49a54e811dd88e9050761f5e93efc53c7776e1fa80700249326f0ba_ppc64le as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/coo-prometheus-rhel8@sha256:f3ade0e4d49a54e811dd88e9050761f5e93efc53c7776e1fa80700249326f0ba_ppc64le, *, * |
| Red Hat | cluster-observability-operator/coo-admission-webhook-rhel8@sha256:96fc05ad7542edffa5286ee9a6d0100a6e288f1ccc20730a7cf068176793ce01_ppc64le as a component of COO 0.4 for RHEL 8 | *, *, cluster-observability-operator/coo-admission-webhook-rhel8@sha256:96fc05ad7542edffa5286ee9a6d0100a6e288f1ccc20730a7cf068176793ce01_ppc64le |
| Red Hat | cluster-observability-operator/cluster-observability-rhel8-operator@sha256:bbb6660cf46efbb1faf486a70cd75eea98bb5934a35b2f8822649adde33b7d69_arm64 as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/cluster-observability-rhel8-operator@sha256:bbb6660cf46efbb1faf486a70cd75eea98bb5934a35b2f8822649adde33b7d69_arm64, *, cluster-observability-operator/cluster-observability-rhel8-operator@sha256:bbb6660cf46efbb1faf486a70cd75eea98bb5934a35b2f8822649adde33b7d69_arm64 |
| Red Hat | cluster-observability-operator/coo-prometheus-config-reloader-rhel8@sha256:fd34ca67de1f32300f7e870b6c8def9b511611d0613bad6936ade83e100d7855_amd64 as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/coo-prometheus-config-reloader-rhel8@sha256:fd34ca67de1f32300f7e870b6c8def9b511611d0613bad6936ade83e100d7855_amd64, cluster-observability-operator/coo-prometheus-config-reloader-rhel8@sha256:fd34ca67de1f32300f7e870b6c8def9b511611d0613bad6936ade83e100d7855_amd64, cluster-observability-operator/coo-prometheus-config-reloader-rhel8@sha256:fd34ca67de1f32300f7e870b6c8def9b511611d0613bad6936ade83e100d7855_amd64 |
| Red Hat | cluster-observability-operator/coo-thanos-rhel8@sha256:5a1d21f2631aa2ef3be1ec41c745c32dc0797f3b6b66c95143a9ac5a187bd40b_amd64 as a component of COO 0.4 for RHEL 8 | *, cluster-observability-operator/coo-thanos-rhel8@sha256:5a1d21f2631aa2ef3be1ec41c745c32dc0797f3b6b66c95143a9ac5a187bd40b_amd64, cluster-observability-operator/coo-thanos-rhel8@sha256:5a1d21f2631aa2ef3be1ec41c745c32dc0797f3b6b66c95143a9ac5a187bd40b_amd64 |
| Red Hat | cluster-observability-operator/coo-console-dashboards-plugin-rhel8@sha256:37e7bfe68d61018277f22e54976f4bd4bc73e89dd438ad541f6327e8f5504eb9_ppc64le as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/coo-console-dashboards-plugin-rhel8@sha256:37e7bfe68d61018277f22e54976f4bd4bc73e89dd438ad541f6327e8f5504eb9_ppc64le, *, cluster-observability-operator/coo-console-dashboards-plugin-rhel8@sha256:37e7bfe68d61018277f22e54976f4bd4bc73e89dd438ad541f6327e8f5504eb9_ppc64le |
| Red Hat | cluster-observability-operator/coo-korrel8r-rhel8@sha256:62705a9d702bd139c34050dba7a3ea5b031561890c70b8d7ad064a02dc60d938_ppc64le as a component of COO 0.4 for RHEL 8 | *, cluster-observability-operator/coo-korrel8r-rhel8@sha256:62705a9d702bd139c34050dba7a3ea5b031561890c70b8d7ad064a02dc60d938_ppc64le, cluster-observability-operator/coo-korrel8r-rhel8@sha256:62705a9d702bd139c34050dba7a3ea5b031561890c70b8d7ad064a02dc60d938_ppc64le |
| Red Hat | cluster-observability-operator/coo-thanos-rhel8@sha256:554aea53cdc36981cb0246ce0f0eea41618ed2ec19c7969475e31290b2652442_ppc64le as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/coo-thanos-rhel8@sha256:554aea53cdc36981cb0246ce0f0eea41618ed2ec19c7969475e31290b2652442_ppc64le, *, * |
| Red Hat | cluster-observability-operator/coo-console-dashboards-plugin-rhel8@sha256:b4eeefb52b8d23ced18e504da71088078a4de96c9920ca4370a37edee3e9bbe7_s390x as a component of COO 0.4 for RHEL 8 | *, cluster-observability-operator/coo-console-dashboards-plugin-rhel8@sha256:b4eeefb52b8d23ced18e504da71088078a4de96c9920ca4370a37edee3e9bbe7_s390x, * |
| Red Hat | cluster-observability-operator/coo-prometheus-rhel8-operator@sha256:9aeaef13a1cd9eee2b21081db72ec2f1ee5c19895bdf5d1398e5fa0d777033c6_ppc64le as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/coo-prometheus-rhel8-operator@sha256:9aeaef13a1cd9eee2b21081db72ec2f1ee5c19895bdf5d1398e5fa0d777033c6_ppc64le, cluster-observability-operator/coo-prometheus-rhel8-operator@sha256:9aeaef13a1cd9eee2b21081db72ec2f1ee5c19895bdf5d1398e5fa0d777033c6_ppc64le, cluster-observability-operator/coo-prometheus-rhel8-operator@sha256:9aeaef13a1cd9eee2b21081db72ec2f1ee5c19895bdf5d1398e5fa0d777033c6_ppc64le |
| Red Hat | cluster-observability-operator/coo-console-troubleshooting-panel-plugin-rhel8@sha256:b9a34abce23ecbf58fa210fafa6b38083e8053194f75f3f30f05ec12aa5800ab_s390x as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/coo-console-troubleshooting-panel-plugin-rhel8@sha256:b9a34abce23ecbf58fa210fafa6b38083e8053194f75f3f30f05ec12aa5800ab_s390x, cluster-observability-operator/coo-console-troubleshooting-panel-plugin-rhel8@sha256:b9a34abce23ecbf58fa210fafa6b38083e8053194f75f3f30f05ec12aa5800ab_s390x, cluster-observability-operator/coo-console-troubleshooting-panel-plugin-rhel8@sha256:b9a34abce23ecbf58fa210fafa6b38083e8053194f75f3f30f05ec12aa5800ab_s390x |
| Red Hat | cluster-observability-operator/coo-thanos-rhel8@sha256:554aea53cdc36981cb0246ce0f0eea41618ed2ec19c7969475e31290b2652442_ppc64le as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/coo-thanos-rhel8@sha256:554aea53cdc36981cb0246ce0f0eea41618ed2ec19c7969475e31290b2652442_ppc64le, cluster-observability-operator/coo-thanos-rhel8@sha256:554aea53cdc36981cb0246ce0f0eea41618ed2ec19c7969475e31290b2652442_ppc64le, * |
| Red Hat | cluster-observability-operator/cluster-observability-operator-bundle@sha256:55ce1ea85a4099f326cae033a63e73c66d0a0d68b5f01c694ee7238b3bb8d79c_amd64 as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/cluster-observability-operator-bundle@sha256:55ce1ea85a4099f326cae033a63e73c66d0a0d68b5f01c694ee7238b3bb8d79c_amd64, cluster-observability-operator/cluster-observability-operator-bundle@sha256:55ce1ea85a4099f326cae033a63e73c66d0a0d68b5f01c694ee7238b3bb8d79c_amd64, cluster-observability-operator/cluster-observability-operator-bundle@sha256:55ce1ea85a4099f326cae033a63e73c66d0a0d68b5f01c694ee7238b3bb8d79c_amd64 |
| Red Hat | cluster-observability-operator/cluster-observability-rhel8-operator@sha256:079fac56eede66aed6385bce19c57db751e6d355e37726d158794dc05a96b51d_ppc64le as a component of COO 0.4 for RHEL 8 | *, cluster-observability-operator/cluster-observability-rhel8-operator@sha256:079fac56eede66aed6385bce19c57db751e6d355e37726d158794dc05a96b51d_ppc64le, * |
| Red Hat | cluster-observability-operator/coo-prometheus-rhel8@sha256:d6040851830dd5f471d2fcc16433e68090d5483fbcfc18300f6decf9b3b4251e_s390x as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/coo-prometheus-rhel8@sha256:d6040851830dd5f471d2fcc16433e68090d5483fbcfc18300f6decf9b3b4251e_s390x, cluster-observability-operator/coo-prometheus-rhel8@sha256:d6040851830dd5f471d2fcc16433e68090d5483fbcfc18300f6decf9b3b4251e_s390x, cluster-observability-operator/coo-prometheus-rhel8@sha256:d6040851830dd5f471d2fcc16433e68090d5483fbcfc18300f6decf9b3b4251e_s390x |
| Red Hat | cluster-observability-operator/cluster-observability-rhel8-operator@sha256:079fac56eede66aed6385bce19c57db751e6d355e37726d158794dc05a96b51d_ppc64le as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/cluster-observability-rhel8-operator@sha256:079fac56eede66aed6385bce19c57db751e6d355e37726d158794dc05a96b51d_ppc64le, cluster-observability-operator/cluster-observability-rhel8-operator@sha256:079fac56eede66aed6385bce19c57db751e6d355e37726d158794dc05a96b51d_ppc64le, cluster-observability-operator/cluster-observability-rhel8-operator@sha256:079fac56eede66aed6385bce19c57db751e6d355e37726d158794dc05a96b51d_ppc64le |
| Red Hat | cluster-observability-operator/coo-korrel8r-rhel8@sha256:eb863dc1d7dff7896ab047120621baa2f2d16fd6561da175a2c635e23b4d4a20_arm64 as a component of COO 0.4 for RHEL 8 | *, cluster-observability-operator/coo-korrel8r-rhel8@sha256:eb863dc1d7dff7896ab047120621baa2f2d16fd6561da175a2c635e23b4d4a20_arm64, * |
| Red Hat | cluster-observability-operator/coo-thanos-rhel8@sha256:8b198b0edb6cf097ce75ff89e2b5f7f5179a1c236b1093a929f5728039a86b4b_s390x as a component of COO 0.4 for RHEL 8 | cluster-observability-operator/coo-thanos-rhel8@sha256:8b198b0edb6cf097ce75ff89e2b5f7f5179a1c236b1093a929f5728039a86b4b_s390x, cluster-observability-operator/coo-thanos-rhel8@sha256:8b198b0edb6cf097ce75ff89e2b5f7f5179a1c236b1093a929f5728039a86b4b_s390x, cluster-observability-operator/coo-thanos-rhel8@sha256:8b198b0edb6cf097ce75ff89e2b5f7f5179a1c236b1093a929f5728039a86b4b_s390x |
| Red Hat | cluster-observability-operator/coo-admission-webhook-rhel8@sha256:1619e486f93ad3dfbecf8aeec903606175b67bd43ac522e6dcd016c9d1a02801_s390x as a component of COO 0.4 for RHEL 8 | *, *, * |
…and 78 more
Timeline
- Oct 14, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8040 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://issues.redhat.com/browse/COO-152 advisory
- https://issues.redhat.com/browse/COO-220 advisory
- https://issues.redhat.com/browse/COO-221 advisory
- https://issues.redhat.com/browse/COO-353 advisory
- https://issues.redhat.com/browse/COO-354 advisory
- https://issues.redhat.com/browse/COO-356 advisory
- https://issues.redhat.com/browse/COO-401 advisory
- https://issues.redhat.com/browse/COO-402 advisory
- https://issues.redhat.com/browse/COO-403 advisory
- https://issues.redhat.com/browse/COO-404 advisory
- https://issues.redhat.com/browse/COO-451 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8040.json advisory
- https://access.redhat.com/security/cve/CVE-2024-6104 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-6104 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-6104 advisory
- https://access.redhat.com/security/cve/CVE-2024-24786 advisory
…and 5 more