VDB
RHSA-2024:7323
RHSA-2024:7323
PUBLISHED
CVSS 6 MEDIUM
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.
Risk Scores
CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift-logging/vector-rhel8@sha256:6b00893f59f1fda09eec0af8525da41fff2b53f00aabb2ecedf5ca63053e0504_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/vector-rhel8@sha256:6b00893f59f1fda09eec0af8525da41fff2b53f00aabb2ecedf5ca63053e0504_ppc64le |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:28ff5eab868ca0259beaf8f0a104576acce32b24dcd6a5c20b6b749d64db08c6_amd64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:555b86d23b1e0ed27a783c9009f351f51304c6229b0015fcd4d0a8304db7b870_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-proxy-rhel8@sha256:555b86d23b1e0ed27a783c9009f351f51304c6229b0015fcd4d0a8304db7b870_arm64 |
| Red Hat | openshift-logging/opa-openshift-rhel8@sha256:df54ac4fc03aa677aa4113bdcac1a30d3128a3d584c9af3ae69e526169da6afa_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/opa-openshift-rhel8@sha256:df54ac4fc03aa677aa4113bdcac1a30d3128a3d584c9af3ae69e526169da6afa_s390x |
| Red Hat | openshift-logging/vector-rhel8@sha256:e3cf8dc7ffadf93362a90205d10c340e37c2c4b4f4966ec4242385c96389007d_amd64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:3fe7de5cf2c389cd25884d53510a9246c2bbb5ca11af74a8c8ae8207b6ffaa25_arm64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:61a1c5b38dd1c26892b41b35cbe6df98af084f1ba1dadf0cfd0791da8973ea47_arm64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/elasticsearch-proxy-rhel8@sha256:ff53c5c33b2197fede1601ca9161dcab76c9d0c560e947ec45aba5fe994e5b2f_s390x as a component of RHOL 5.6 for RHEL 8 | openshift-logging/elasticsearch-proxy-rhel8@sha256:ff53c5c33b2197fede1601ca9161dcab76c9d0c560e947ec45aba5fe994e5b2f_s390x |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:1964fe3b5843e0ead6c131c34b71b6627c8d2883d4c28248f9ba28b09bc454eb_arm64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/log-file-metric-exporter-rhel8@sha256:4183c6ff793a71a9e6e3e8a755bbaf184689b5d1afad793036dd851f1159f3b7_ppc64le as a component of RHOL 5.6 for RHEL 8 | openshift-logging/log-file-metric-exporter-rhel8@sha256:4183c6ff793a71a9e6e3e8a755bbaf184689b5d1afad793036dd851f1159f3b7_ppc64le |
| Red Hat | openshift-logging/elasticsearch-rhel8-operator@sha256:6bb1c89b1e41761b93f567d4d360391d40d03e7ba1f9e6c7d4b4818cb7310ec4_arm64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:096feff384d0c1e5263d9831c0208008aab6d873804a78eb5a645982563a4a59_amd64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/cluster-logging-rhel8-operator@sha256:e15ba7e7a120fe1db26cb23ec918cfcb4528dc5961ded2f62e9b432df11e4d8e_amd64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:4ba4c8815867119748d6482b9cd353481fdc8ec07925ebfaef30234f600cef99_arm64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/loki-rhel8-operator@sha256:196573fdd23923fa8c4533083e7764be218947cc38560aa91f0595965c196081_s390x as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/kibana6-rhel8@sha256:009f07eb10aa16877de40943731770000991835e78546dba2cfc6dd4bf2a1b14_ppc64le as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/fluentd-rhel8@sha256:3fe7de5cf2c389cd25884d53510a9246c2bbb5ca11af74a8c8ae8207b6ffaa25_arm64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/logging-loki-rhel8@sha256:381339489d56b457ddadf156274cf06af74c523eeb424c462dca4907e1b73f5e_arm64 as a component of RHOL 5.6 for RHEL 8 | openshift-logging/logging-loki-rhel8@sha256:381339489d56b457ddadf156274cf06af74c523eeb424c462dca4907e1b73f5e_arm64 |
| Red Hat | openshift-logging/elasticsearch6-rhel8@sha256:963ee915d10f3cadc5d05ffc6df5d4a0c03fc32a1da5968f394f8a59c244ab68_amd64 as a component of RHOL 5.6 for RHEL 8 | * |
| Red Hat | openshift-logging/logging-curator5-rhel8@sha256:9965c66ec014a63e2b6cdbe762cf03e3f65e396500b07e640eba28ca74ca4d02_s390x as a component of RHOL 5.6 for RHEL 8 | * |
…and 106 more
Timeline
- Oct 7, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Aug 4, 2026 CVE Updated
- Aug 4, 2026 Distribution Patch
- Aug 4, 2026 Security Advisory
- Aug 4, 2026 Security Advisory
References
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7323.json advisory
- https://access.redhat.com/security/cve/CVE-2024-6104 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://www.cve.org/CVERecord?id=CVE-2024-6104 advisory
- https://access.redhat.com/errata/RHSA-2024:7323 advisory
- https://issues.redhat.com/browse/LOG-5950 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-6104 advisory