VDB
RHSA-2024:2096
RHSA-2024:2096
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A flaw was found in Go's net/http/cookiejar standard library package. When following an HTTP redirect to a domain that is not a subdomain match or an exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not. A maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly forwarded.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64, *, openshift-logging/opa-openshift-rhel9@sha256:fcb406ba6ca71d851f3a1a88f1d33122d05727992ed094d11b58b26a845f307e_arm64 |
| Red Hat | openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le as a component of RHOL 5.9 for RHEL 9 | *, openshift-logging/logging-view-plugin-rhel9@sha256:6b23a56140adbe97601e778c3e79c2fe6f0efd748847ed2c760f1707fead8f9a_ppc64le, * |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x as a component of RHOL 5.9 for RHEL 9 | *, openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x, openshift-logging/log-file-metric-exporter-rhel9@sha256:83cdeaba33d3714b390587b4de159d0b6c7ff93727612c005109b610d59fc224_s390x |
| Red Hat | openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64, openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64, openshift-logging/eventrouter-rhel9@sha256:149245f6e7ef126c9866a20087253b05b224055a3f10ae80d1c838d7df9b36c3_amd64 |
| Red Hat | openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le as a component of RHOL 5.9 for RHEL 9 | *, *, openshift-logging/fluentd-rhel9@sha256:d168c33f796efc1ab9f8c9090a518276ad5b8681325d7a93268d8361424f9b39_ppc64le |
| Red Hat | openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64, openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64, openshift-logging/logging-loki-rhel9@sha256:f1f35408f3680234c1baa7fd9c84b52462ee7f4c52c75034bef8c6a2cad55372_arm64 |
| Red Hat | openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le as a component of RHOL 5.9 for RHEL 9 | openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le, openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le, openshift-logging/opa-openshift-rhel9@sha256:575991ff668c00f871273b761497bfce388892b9152d7c49e62efee1d199680f_ppc64le |
| Red Hat | openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/opa-openshift-rhel9@sha256:6254f71ba78f25bd3181c64187bf45520d483f559ee0ea186e52b2a4eb3f659c_amd64, *, * |
| Red Hat | openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x as a component of RHOL 5.9 for RHEL 9 | openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x, *, openshift-logging/logging-loki-rhel9@sha256:07cefaf47dec6bf96ef61e73adb20d0fb00a9c0ad02bcc1639ed135967f7a9ed_s390x |
| Red Hat | openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64, *, openshift-logging/logging-loki-rhel9@sha256:0612bac24616378ce5f0ac072811afe4f0b90f42967c8c71f6140a26b8c87d84_amd64 |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64, openshift-logging/log-file-metric-exporter-rhel9@sha256:86aed724b2670ee04591f26b4c6d93bda1794383066a05604c378a83428c103a_amd64, * |
| Red Hat | openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64 as a component of RHOL 5.9 for RHEL 9 | *, *, * |
| Red Hat | openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64, openshift-logging/vector-rhel9@sha256:483a6fb9b5f619a3ec9713d9a934deb7ffa402fdff1a6887741cf09207b904a2_amd64, * |
| Red Hat | openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64 as a component of RHOL 5.9 for RHEL 9 | *, openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64, openshift-logging/loki-operator-bundle@sha256:9fb6e7902d07e07c361fe59701f47afc59738c5e79fb284b48a871396a32b611_amd64 |
| Red Hat | openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64 as a component of RHOL 5.9 for RHEL 9 | openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64, openshift-logging/loki-rhel9-operator@sha256:a24707ef9b43a2f8efd48239f37b660ddd3c8f2a8d12257565263f4b981ea0fd_arm64, * |
| Red Hat | openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64 as a component of RHOL 5.9 for RHEL 9 | *, openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64, openshift-logging/cluster-logging-rhel9-operator@sha256:96355f3583c1facc7ce1d35271b45b938e32085d4f384dd31d77515b12ca2ea6_arm64 |
| Red Hat | openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x as a component of RHOL 5.9 for RHEL 9 | *, openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x, * |
| Red Hat | openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x as a component of RHOL 5.9 for RHEL 9 | *, *, openshift-logging/loki-rhel9-operator@sha256:c7cadd268b410021f4d3a3a5e908acff2284f4e0849930343f80d6aab4853ee6_s390x |
| Red Hat | openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x as a component of RHOL 5.9 for RHEL 9 | openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x, openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x, openshift-logging/logging-view-plugin-rhel9@sha256:8d04b5477d501a8c24889c4a8de6aac1a469866d60df30804907aa3da7d639f6_s390x |
| Red Hat | openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64 as a component of RHOL 5.9 for RHEL 9 | *, openshift-logging/logging-view-plugin-rhel9@sha256:f44755e453fd642409d36d9067ee72bca5a7e7869f7c7388eba4a212ed6a2321_arm64, * |
…and 64 more
Timeline
- May 1, 2024 CVE Published
- Apr 26, 2026 Distribution Patch
- Apr 26, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 2, 2026 Security Advisory
- May 6, 2026 Distribution Patch
- May 6, 2026 Security Advisory
- May 9, 2026 Security Advisory
- May 9, 2026 Security Advisory
- May 15, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://issues.redhat.com/browse/LOG-5401 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-24786 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-24786 advisory
- https://go.dev/issue/65390 advisory
- https://go.dev/cl/564196 advisory
- https://access.redhat.com/security/cve/CVE-2024-24786 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-28180 advisory
- https://issues.redhat.com/browse/LOG-5309 advisory
- http://www.openwall.com/lists/oss-security/2024/03/08/4 advisory
- https://pkg.go.dev/vuln/GO-2024-2599 advisory
- https://github.com/advisories/GHSA-3q2c-pvp5-3cqp advisory
- https://security.netapp.com/advisory/ntap-20240329-0005 advisory
- https://groups.google.com/g/golang-announce/c/ArQ6CDgtEjY/ advisory
- https://issues.redhat.com/browse/LOG-5322 advisory
- https://issues.redhat.com/browse/LOG-5323 advisory
- https://issues.redhat.com/browse/LOG-5397 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2096.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268018 issue
- https://www.cve.org/CVERecord?id=CVE-2023-45289 advisory
- https://go.dev/cl/569341 advisory
…and 36 more