VDB
RHSA-2024:5160
RHSA-2024:5160
PUBLISHED
CVSS 6 MEDIUM
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.
Risk Scores
CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:f5b37491c38716451a166f39aebfc94a1446b1c849056d76d7dc1a8b3ba5030c_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ovn-kubernetes-rhel9@sha256:f5b37491c38716451a166f39aebfc94a1446b1c849056d76d7dc1a8b3ba5030c_arm64 |
| Red Hat | openshift4/ose-console@sha256:a1611235af2ec6737eb365162ac4705f2e365bc1b184fca47e0e87d3daa39dce_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-console@sha256:a1611235af2ec6737eb365162ac4705f2e365bc1b184fca47e0e87d3daa39dce_s390x |
| Red Hat | openshift4/ose-docker-builder@sha256:2e288e83e6ac0f6396b7722c4e62a91a8c5b9c29df0c6804a481eeaf4fd7ee15_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-docker-builder@sha256:2e288e83e6ac0f6396b7722c4e62a91a8c5b9c29df0c6804a481eeaf4fd7ee15_amd64 |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:399cbcb2fe6e56fbbbcf239a1f6c617ebf9b30e68c6123bebab9bd6a72da8be9_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-insights-rhel9-operator@sha256:1bf0deb37279bb9366ab37f525bef7568f76ff91342a2c77f5ef33db8883da81_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-multus-whereabouts-ipam-cni-rhel8@sha256:6161cebd9b6ad27133fe2a6bcc309d7fd832839c6a75f8f8029c1d18d0f6bd40_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-console@sha256:a2671e9da1da604163f9657120b48f4cea54443cfdf254cf1ac346ccc49c59ec_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:8d9ad6ac84d4dcaebc0f90a0f636549a12c95fbc61593a40b3a7506c8ce4fca6_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-cluster-capi-rhel9-operator@sha256:90a023cd5fc6641fdb983489e75e23cc7271affcdf4399f415492c87439f5a9a_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-ironic-rhel9@sha256:12b0015256766e3a97670f0c9b8300f94f61649c5745930ff353129719848ca8_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:502fc2f761242a68582eb0eb45195e5fb6bb9bf6e60fed1ba8048798d3ee113b_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:502fc2f761242a68582eb0eb45195e5fb6bb9bf6e60fed1ba8048798d3ee113b_arm64 |
| Red Hat | openshift4/ose-installer-artifacts@sha256:4d08d4b0f4d04b872ba6c447a936fc518d3c9451ef6867b7a9d8dc560b4208a0_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-installer-artifacts@sha256:4d08d4b0f4d04b872ba6c447a936fc518d3c9451ef6867b7a9d8dc560b4208a0_ppc64le |
| Red Hat | openshift4/ose-powervs-block-csi-driver-rhel9@sha256:dfb53dadb3ddcfa9eb13c45d5d26e41192b24ad6573cdb1a8c4f0085e1941fa8_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-powervs-block-csi-driver-rhel9@sha256:dfb53dadb3ddcfa9eb13c45d5d26e41192b24ad6573cdb1a8c4f0085e1941fa8_ppc64le |
| Red Hat | openshift4/ose-agent-installer-utils-rhel9@sha256:d97251c1db64a25c7fe1b64b6a6663d98b8914c20dab5fb7ecdb7341659c1f89_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-machine-os-images-rhel8@sha256:98dd7158235aaf05ba139728e29ad2f85f977d7ba472903aec2f5d2d0a459da9_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-machine-os-images-rhel8@sha256:98dd7158235aaf05ba139728e29ad2f85f977d7ba472903aec2f5d2d0a459da9_ppc64le |
| Red Hat | openshift4/ose-cluster-capi-rhel9-operator@sha256:85981f4816380bcd0db259dedb8172e804365f1ad52dbd296f6c89ebaaf60743_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-cluster-capi-rhel9-operator@sha256:740840c31c753b651e7b782a174413d63da76dbe9fad55b546f923e3e6d2be5d_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-baremetal-installer-rhel8@sha256:9010659a021411365862e212a833f9a468eb72db9ba2c3977026c0f03afd1eaf_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-baremetal-installer-rhel8@sha256:9010659a021411365862e212a833f9a468eb72db9ba2c3977026c0f03afd1eaf_amd64 |
| Red Hat | openshift4/ose-agent-installer-utils-rhel9@sha256:bdfdafcdd0dbd38ed15dffd043c3d1a6627c7128112e4dcd6455bc74f32b8370_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/network-tools-rhel8@sha256:b6b1ec265a2de8011c366e81075d75f20d8d6490dc9598813f14a06b78af8ea8_s390x as a component of Red Hat OpenShift Container Platform 4.15 | * |
…and 148 more
Timeline
- Aug 15, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Aug 4, 2026 CVE Updated
- Aug 4, 2026 Distribution Patch
References
- https://access.redhat.com/errata/RHSA-2024:5160 advisory
- https://issues.redhat.com/browse/OCPBUGS-37229 advisory
- https://issues.redhat.com/browse/OCPBUGS-37277 advisory
- https://issues.redhat.com/browse/OCPBUGS-37672 advisory
- https://issues.redhat.com/browse/OCPBUGS-37775 advisory
- https://issues.redhat.com/browse/OCPBUGS-37813 advisory
- https://issues.redhat.com/browse/OCPBUGS-37849 advisory
- https://access.redhat.com/security/cve/CVE-2024-6104 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-6104 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://issues.redhat.com/browse/OCPBUGS-33402 advisory
- https://issues.redhat.com/browse/OCPBUGS-34721 advisory
- https://issues.redhat.com/browse/OCPBUGS-37174 advisory
- https://issues.redhat.com/browse/OCPBUGS-37288 advisory
- https://issues.redhat.com/browse/OCPBUGS-37962 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5160.json advisory
- https://www.cve.org/CVERecord?id=CVE-2024-6104 advisory