VDB

RHSA-2024:11562

RHSA-2024:11562 PUBLISHED CVSS 6 MEDIUM

A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.

Risk Scores

CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-csi-node-driver-registrar@sha256:8c35643eb948d230de873a10491ce0ec813fabf0b1fc91caa377d8da05c35e0c_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-csi-node-driver-registrar@sha256:8c35643eb948d230de873a10491ce0ec813fabf0b1fc91caa377d8da05c35e0c_amd64
Red Hatopenshift4/ose-csi-node-driver-registrar-rhel8@sha256:8c35643eb948d230de873a10491ce0ec813fabf0b1fc91caa377d8da05c35e0c_amd64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-multus-route-override-cni-rhel8@sha256:12384b771c520c2d8bc68f94f7df76191c3d5979727434aeace85c9dd06c9946_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-multus-route-override-cni-rhel8@sha256:12384b771c520c2d8bc68f94f7df76191c3d5979727434aeace85c9dd06c9946_arm64
Red Hatopenshift4/ose-prometheus@sha256:b397e389b3fb8f53c6ad10c7250f44b492e8d5d5d5ba4d070ec14c4be1aa164d_arm64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-csi-node-driver-registrar-rhel8@sha256:8f48513c54c7c3d3357308d9df35e8732744de9367162eef604723f2d6c6d342_arm64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-cli@sha256:c88c72b423082cdeca89a218aade61fa79b8cad698d9b7d404965104c31b7bbd_amd64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-cli@sha256:c88c72b423082cdeca89a218aade61fa79b8cad698d9b7d404965104c31b7bbd_amd64
Red Hatopenshift4/egress-router-cni-rhel8@sha256:b79c371827755180339c48bc67b808bff49f5e421d69adf8ecc6dc68866607d7_arm64 as a component of Red Hat OpenShift Container Platform 4.15openshift4/egress-router-cni-rhel8@sha256:b79c371827755180339c48bc67b808bff49f5e421d69adf8ecc6dc68866607d7_arm64
Red Hatopenshift4/ose-prometheus@sha256:57848781345eaebbe3cbf04b9c6ceff2596a47961aa9d1251fbf9475e32bc06a_amd64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-csi-external-resizer-rhel8@sha256:92c173f16b1e715a52a94c786b6ebbf2466ab84073ab0c60d8b2d069f6a741a6_amd64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-cli-artifacts@sha256:2c3a26391020bf1f4070ccc4d364666457558848a29c455fbbe04204731c8a05_amd64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:9b4547573030d35b6cb5203f0ed476698009e81e7e8454bf6caebf4f4b549039_s390x as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/kube-metrics-server-rhel8@sha256:989747ff60b1da33937e478aed606a5250cad5a80b5fccf3262b971b4187fdda_arm64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ovirt-csi-driver-rhel8-operator@sha256:b07019ebdf712987ddeff35a947f1bab2ba9c2323727c21f8beabb6c48939a05_arm64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-console-rhel9-operator@sha256:cd31fb0e23d703d0dff37eef0eef1ac5684bb0f022043d790cc2160d33189665_ppc64le as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-csi-node-driver-registrar@sha256:8dfd3ee361ced716e64760ae68a2464b9772f2aa483605b2f4fd2d7e583ff1b5_s390x as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-tools-rhel8@sha256:2d6ca2741400616767e9c79d3227427f849b7e076e79a53620bdaf6abd83f03b_amd64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-csi-driver-manila-rhel8-operator@sha256:a416ec87def0755331da76961ef427532ff673aa03acf889a227a3ed7312de02_amd64 as a component of Red Hat OpenShift Container Platform 4.15*
Red Hatopenshift4/ose-agent-installer-orchestrator-rhel8@sha256:779a7003e79ee4b4604a9e9a3d0a6f318bbb4f594d13da46f2ea99fd48d54b80_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-agent-installer-orchestrator-rhel8@sha256:779a7003e79ee4b4604a9e9a3d0a6f318bbb4f594d13da46f2ea99fd48d54b80_ppc64le
Red Hatopenshift4/ose-csi-node-driver-registrar-rhel8@sha256:d5712d0b7388fcb0bd2ded19dcd4279fea203494dd56571d79061eb9c9e25684_ppc64le as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-csi-node-driver-registrar-rhel8@sha256:d5712d0b7388fcb0bd2ded19dcd4279fea203494dd56571d79061eb9c9e25684_ppc64le
Red Hatopenshift4/ose-multus-route-override-cni-rhel8@sha256:86eb9d86bfd96332486fd11055d9a4539b96da5300cf6333aff779e4ec1725e4_s390x as a component of Red Hat OpenShift Container Platform 4.15openshift4/ose-multus-route-override-cni-rhel8@sha256:86eb9d86bfd96332486fd11055d9a4539b96da5300cf6333aff779e4ec1725e4_s390x

…and 604 more

Timeline

  • Jan 2, 2025 CVE Published
  • Apr 25, 2026 Distribution Patch
  • Apr 25, 2026 Security Advisory
  • Aug 4, 2026 CVE Updated
  • Aug 4, 2026 Distribution Patch
  • Aug 4, 2026 Security Advisory

References

…and 6 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›