VDB
RHSA-2024%3A8314
RHSA-2024%3A8314
PUBLISHED
CVSS 6 MEDIUM
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.
Risk Scores
CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/opa-openshift-rhel9@sha256:c0c8803b6dfc1527319f6940f7420e1f9694a729bd58f23603c63d70ffd72dec_amd64 as a component of RHOL 6.0 for RHEL 9 | openshift-logging/opa-openshift-rhel9@sha256:c0c8803b6dfc1527319f6940f7420e1f9694a729bd58f23603c63d70ffd72dec_amd64 |
| Red Hat | openshift-logging/loki-rhel9-operator@sha256:bd02c26306cfcaf70db9d14b25779e8570ee0b0d800db10b8e88d7ab8879c43d_arm64 as a component of RHOL 6.0 for RHEL 9 | openshift-logging/loki-rhel9-operator@sha256:bd02c26306cfcaf70db9d14b25779e8570ee0b0d800db10b8e88d7ab8879c43d_arm64 |
| Red Hat | openshift-logging/logging-loki-rhel9@sha256:58e1634d6d98f9a95c79ca3b47a8a5e3b2d33f3be565df4ada2ed5d436e98570_s390x as a component of RHOL 6.0 for RHEL 9 | openshift-logging/logging-loki-rhel9@sha256:58e1634d6d98f9a95c79ca3b47a8a5e3b2d33f3be565df4ada2ed5d436e98570_s390x |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel9@sha256:59c0f415342c924358e23c1b3202e928fbca3617ad0b590784402763b3139fda_amd64 as a component of RHOL 6.0 for RHEL 9 | * |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:20b0f87cc720ab3d1564fc2393ea4489bd3240d46b1e2f175344d6620147eeb9_amd64 as a component of RHOL 6.0 for RHEL 9 | openshift-logging/eventrouter-rhel9@sha256:20b0f87cc720ab3d1564fc2393ea4489bd3240d46b1e2f175344d6620147eeb9_amd64 |
| Red Hat | openshift-logging/loki-operator-bundle@sha256:69164d3ced0bda5f4c1f48a292c891bf6629ea02f5e6262234c7574a0a201e1b_amd64 as a component of RHOL 6.0 for RHEL 9 | openshift-logging/loki-operator-bundle@sha256:69164d3ced0bda5f4c1f48a292c891bf6629ea02f5e6262234c7574a0a201e1b_amd64 |
| Red Hat | openshift-logging/vector-rhel9@sha256:a9a18e4c678e3beaa758c5a3a0f8319e7314ad2e656e1ec9f5be9bc5701605e0_ppc64le as a component of RHOL 6.0 for RHEL 9 | openshift-logging/vector-rhel9@sha256:a9a18e4c678e3beaa758c5a3a0f8319e7314ad2e656e1ec9f5be9bc5701605e0_ppc64le |
| Red Hat | openshift-logging/vector-rhel9@sha256:a11d08325c1797dd15b20aead58d59edd269d62024debe6db6e6ca299ecf198d_arm64 as a component of RHOL 6.0 for RHEL 9 | openshift-logging/vector-rhel9@sha256:a11d08325c1797dd15b20aead58d59edd269d62024debe6db6e6ca299ecf198d_arm64 |
| Red Hat | openshift-logging/lokistack-gateway-rhel9@sha256:2fa903cfe177b8289f07cd71911569ce24e51d1b605d04e148520f757a926a4b_amd64 as a component of RHOL 6.0 for RHEL 9 | openshift-logging/lokistack-gateway-rhel9@sha256:2fa903cfe177b8289f07cd71911569ce24e51d1b605d04e148520f757a926a4b_amd64 |
| Red Hat | openshift-logging/cluster-logging-rhel9-operator@sha256:6c093e26c72fa03fb48d819b08dd3b991db94dd6cc414670c5ac8a1f4603aa4d_arm64 as a component of RHOL 6.0 for RHEL 9 | * |
| Red Hat | openshift-logging/lokistack-gateway-rhel9@sha256:e9b865d425e949824ac5c4a3cdd191c510b50f2f864f3b33837ab1b50e5e0c39_arm64 as a component of RHOL 6.0 for RHEL 9 | openshift-logging/lokistack-gateway-rhel9@sha256:e9b865d425e949824ac5c4a3cdd191c510b50f2f864f3b33837ab1b50e5e0c39_arm64 |
| Red Hat | openshift-logging/cluster-logging-rhel9-operator@sha256:6dfb015683d165d9d10226bec2d74da3238e8ad743c1ea09fe98e63fa49a251d_ppc64le as a component of RHOL 6.0 for RHEL 9 | openshift-logging/cluster-logging-rhel9-operator@sha256:6dfb015683d165d9d10226bec2d74da3238e8ad743c1ea09fe98e63fa49a251d_ppc64le |
| Red Hat | openshift-logging/loki-rhel9-operator@sha256:4bb30b753e40eb39581b7d73c5718731a8956d2e84b7442c183c4e47e78b6345_ppc64le as a component of RHOL 6.0 for RHEL 9 | * |
| Red Hat | openshift-logging/loki-rhel9-operator@sha256:4bb30b753e40eb39581b7d73c5718731a8956d2e84b7442c183c4e47e78b6345_ppc64le as a component of RHOL 6.0 for RHEL 9 | openshift-logging/loki-rhel9-operator@sha256:4bb30b753e40eb39581b7d73c5718731a8956d2e84b7442c183c4e47e78b6345_ppc64le |
| Red Hat | openshift-logging/loki-operator-bundle@sha256:69164d3ced0bda5f4c1f48a292c891bf6629ea02f5e6262234c7574a0a201e1b_amd64 as a component of RHOL 6.0 for RHEL 9 | * |
| Red Hat | openshift-logging/logging-loki-rhel9@sha256:438fd4b899437499f4c13c004aa11303a05e7e431cf354d04eb5792cd9d99377_ppc64le as a component of RHOL 6.0 for RHEL 9 | openshift-logging/logging-loki-rhel9@sha256:438fd4b899437499f4c13c004aa11303a05e7e431cf354d04eb5792cd9d99377_ppc64le |
| Red Hat | openshift-logging/logging-loki-rhel9@sha256:438fd4b899437499f4c13c004aa11303a05e7e431cf354d04eb5792cd9d99377_ppc64le as a component of RHOL 6.0 for RHEL 9 | openshift-logging/logging-loki-rhel9@sha256:438fd4b899437499f4c13c004aa11303a05e7e431cf354d04eb5792cd9d99377_ppc64le |
| Red Hat | openshift-logging/opa-openshift-rhel9@sha256:9e24aff02d14b850e461913339c45fb4257a5d781476801176ddc4359edb420c_arm64 as a component of RHOL 6.0 for RHEL 9 | openshift-logging/opa-openshift-rhel9@sha256:9e24aff02d14b850e461913339c45fb4257a5d781476801176ddc4359edb420c_arm64 |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:151dd2a38fec0844dd58b5eb9fc30573133c1bd85b2f76716fa4861a94d4c566_arm64 as a component of RHOL 6.0 for RHEL 9 | openshift-logging/eventrouter-rhel9@sha256:151dd2a38fec0844dd58b5eb9fc30573133c1bd85b2f76716fa4861a94d4c566_arm64 |
| Red Hat | openshift-logging/vector-rhel9@sha256:9037c21b56bba4582edf6d46fda36462ab29db8c60189b06621766059fd511df_amd64 as a component of RHOL 6.0 for RHEL 9 | openshift-logging/vector-rhel9@sha256:9037c21b56bba4582edf6d46fda36462ab29db8c60189b06621766059fd511df_amd64 |
…and 48 more
Timeline
- Oct 23, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:8314 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://issues.redhat.com/browse/LOG-6129 advisory
- https://issues.redhat.com/browse/LOG-6151 advisory
- https://issues.redhat.com/browse/LOG-6180 advisory
- https://issues.redhat.com/browse/LOG-6202 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8314.json advisory
- https://access.redhat.com/security/cve/CVE-2024-6104 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://www.cve.org/CVERecord?id=CVE-2024-6104 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-6104 advisory
- https://access.redhat.com/security/cve/CVE-2024-24791 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2295310 issue
- https://www.cve.org/CVERecord?id=CVE-2024-24791 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24791 advisory
- https://go.dev/cl/591255 advisory
- https://go.dev/issue/67555 advisory
- https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ advisory
- https://access.redhat.com/security/cve/CVE-2024-34155 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310527 issue
…and 20 more