VDB
RHSA-2025%3A11669
RHSA-2025%3A11669
PUBLISHED
CVSS 6 MEDIUM
A vulnerability was found in go-retryablehttp. The package may suffer from a lack of input sanitization by not cleaning up URL data when writing to the logs. This issue could expose sensitive authentication information.
Risk Scores
CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-network-interface-bond-cni-rhel8@sha256:d2d20b6622b55e53c02613dbd18e1b5edb91b143774049c9dcbd7f4b55784283_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | openshift4/ose-console@sha256:cc0253e235200f85cf2f562fb835c1f73e5012f593bbeaa606068e52bd65863f_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-console@sha256:cc0253e235200f85cf2f562fb835c1f73e5012f593bbeaa606068e52bd65863f_amd64, openshift4/ose-console@sha256:cc0253e235200f85cf2f562fb835c1f73e5012f593bbeaa606068e52bd65863f_amd64, openshift4/ose-console@sha256:cc0253e235200f85cf2f562fb835c1f73e5012f593bbeaa606068e52bd65863f_amd64 |
| Red Hat | openshift4/ose-multus-cni@sha256:4971a55fc253b01bab9f777dce12143df0980849ef95ddf2481c7b153a9fbb72_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-multus-cni@sha256:4971a55fc253b01bab9f777dce12143df0980849ef95ddf2481c7b153a9fbb72_s390x, *, * |
| Red Hat | openshift4/ose-pod@sha256:1ba91aa4efedd2d7e8cc3aef3e4269267536f0c71dd0fe7c5b8a559954ad022a_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-pod@sha256:1ba91aa4efedd2d7e8cc3aef3e4269267536f0c71dd0fe7c5b8a559954ad022a_ppc64le, openshift4/ose-pod@sha256:1ba91aa4efedd2d7e8cc3aef3e4269267536f0c71dd0fe7c5b8a559954ad022a_ppc64le |
| Red Hat | openshift4/ose-prometheus-operator@sha256:d688b0f1df80f46584761a9745cc2f1cae3871ddfa0a89177c05f27013e0183d_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-prometheus-operator@sha256:d688b0f1df80f46584761a9745cc2f1cae3871ddfa0a89177c05f27013e0183d_arm64, *, openshift4/ose-prometheus-operator@sha256:d688b0f1df80f46584761a9745cc2f1cae3871ddfa0a89177c05f27013e0183d_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:19be31083d4742dcfe1a4abdd5e172f4108a786cc60841c43859026c539f446f_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:19be31083d4742dcfe1a4abdd5e172f4108a786cc60841c43859026c539f446f_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:19be31083d4742dcfe1a4abdd5e172f4108a786cc60841c43859026c539f446f_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:19be31083d4742dcfe1a4abdd5e172f4108a786cc60841c43859026c539f446f_ppc64le |
| Red Hat | openshift4/ose-multus-cni@sha256:c4a97f34b836f427bc0105f918140638ec3aaf01b27117c1859de2772664dd79_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-multus-cni@sha256:c4a97f34b836f427bc0105f918140638ec3aaf01b27117c1859de2772664dd79_ppc64le, openshift4/ose-multus-cni@sha256:c4a97f34b836f427bc0105f918140638ec3aaf01b27117c1859de2772664dd79_ppc64le, * |
| Red Hat | openshift4/ose-pod@sha256:ccb70ab202eacf26c59c091ff842f428b6d871567b2e2e937fdbf3b7eddd6601_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-pod@sha256:ccb70ab202eacf26c59c091ff842f428b6d871567b2e2e937fdbf3b7eddd6601_s390x, *, openshift4/ose-pod@sha256:ccb70ab202eacf26c59c091ff842f428b6d871567b2e2e937fdbf3b7eddd6601_s390x |
| Red Hat | openshift4/ose-cluster-capi-operator-container-rhel8@sha256:09260811b37153334327e7b236abb8365af85cdff11cd31d55ef82b5e318ae02_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-cluster-capi-operator-container-rhel8@sha256:09260811b37153334327e7b236abb8365af85cdff11cd31d55ef82b5e318ae02_amd64, openshift4/ose-cluster-capi-operator-container-rhel8@sha256:09260811b37153334327e7b236abb8365af85cdff11cd31d55ef82b5e318ae02_amd64 |
| Red Hat | openshift4/ose-multus-networkpolicy-rhel8@sha256:49af18223fa741d1d4a56467daeb672079adf452c918203ae54c77afcb51de15_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-multus-networkpolicy-rhel8@sha256:49af18223fa741d1d4a56467daeb672079adf452c918203ae54c77afcb51de15_amd64, openshift4/ose-multus-networkpolicy-rhel8@sha256:49af18223fa741d1d4a56467daeb672079adf452c918203ae54c77afcb51de15_amd64, openshift4/ose-multus-networkpolicy-rhel8@sha256:49af18223fa741d1d4a56467daeb672079adf452c918203ae54c77afcb51de15_amd64 |
| Red Hat | openshift4/ose-docker-builder@sha256:59339e052241ae42418c3004669b19ea10a2f8125ab9a1fae9f60143e3bfaf3e_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-docker-builder@sha256:59339e052241ae42418c3004669b19ea10a2f8125ab9a1fae9f60143e3bfaf3e_s390x, openshift4/ose-docker-builder@sha256:59339e052241ae42418c3004669b19ea10a2f8125ab9a1fae9f60143e3bfaf3e_s390x, * |
| Red Hat | openshift4/ose-k8s-prometheus-adapter@sha256:99ee6d9f5c6ee270f779e876530899c70cceeee5e2d8604464aae34b055d7beb_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, *, * |
| Red Hat | openshift4/ose-cluster-autoscaler@sha256:a47bc2e9258ef51202044dee57ee7ca1a142388a017d15d08f951b991a64090f_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-cluster-autoscaler@sha256:a47bc2e9258ef51202044dee57ee7ca1a142388a017d15d08f951b991a64090f_s390x, openshift4/ose-cluster-autoscaler@sha256:a47bc2e9258ef51202044dee57ee7ca1a142388a017d15d08f951b991a64090f_s390x |
| Red Hat | openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:5272e30efe9362820f0dc2edcf2c5cf9040a2adf99d0dbbe084049c5ee4fb6fb_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator@sha256:5272e30efe9362820f0dc2edcf2c5cf9040a2adf99d0dbbe084049c5ee4fb6fb_ppc64le, * |
| Red Hat | openshift4/ose-csi-external-snapshotter-rhel8@sha256:9a51d33020065d1a5d4c897149e58a29da9e97334195c9bdf5ef091f7cf11e90_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-csi-external-snapshotter-rhel8@sha256:9a51d33020065d1a5d4c897149e58a29da9e97334195c9bdf5ef091f7cf11e90_s390x, openshift4/ose-csi-external-snapshotter-rhel8@sha256:9a51d33020065d1a5d4c897149e58a29da9e97334195c9bdf5ef091f7cf11e90_s390x, openshift4/ose-csi-external-snapshotter-rhel8@sha256:9a51d33020065d1a5d4c897149e58a29da9e97334195c9bdf5ef091f7cf11e90_s390x |
| Red Hat | openshift4/ose-thanos-rhel8@sha256:8da4dc300895bbe29193187ac0e2c6c23b81a8160f1b0f03738101e64a0402f3_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-thanos-rhel8@sha256:8da4dc300895bbe29193187ac0e2c6c23b81a8160f1b0f03738101e64a0402f3_ppc64le, *, openshift4/ose-thanos-rhel8@sha256:8da4dc300895bbe29193187ac0e2c6c23b81a8160f1b0f03738101e64a0402f3_ppc64le |
| Red Hat | openshift4/ose-csi-external-provisioner-rhel8@sha256:ccff65c10a064a5039de5d5fc2cae743181be395a0d90bc18dcdde507cddf590_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-csi-external-provisioner-rhel8@sha256:ccff65c10a064a5039de5d5fc2cae743181be395a0d90bc18dcdde507cddf590_ppc64le, openshift4/ose-csi-external-provisioner-rhel8@sha256:ccff65c10a064a5039de5d5fc2cae743181be395a0d90bc18dcdde507cddf590_ppc64le, openshift4/ose-csi-external-provisioner-rhel8@sha256:ccff65c10a064a5039de5d5fc2cae743181be395a0d90bc18dcdde507cddf590_ppc64le |
| Red Hat | openshift4/ose-cloud-credential-operator@sha256:4a81324704c3166fad2aaed1583b157137603af3607332638f23b65468a8ec0a_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-cloud-credential-operator@sha256:4a81324704c3166fad2aaed1583b157137603af3607332638f23b65468a8ec0a_s390x, *, openshift4/ose-cloud-credential-operator@sha256:4a81324704c3166fad2aaed1583b157137603af3607332638f23b65468a8ec0a_s390x |
| Red Hat | openshift4/openshift-route-controller-manager-rhel8@sha256:8b75d993cd9febbdb7f2b77260630932d2d15a003a28f7e4d52ac20650f867e5_s390x as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/openshift-route-controller-manager-rhel8@sha256:8b75d993cd9febbdb7f2b77260630932d2d15a003a28f7e4d52ac20650f867e5_s390x, openshift4/openshift-route-controller-manager-rhel8@sha256:8b75d993cd9febbdb7f2b77260630932d2d15a003a28f7e4d52ac20650f867e5_s390x, openshift4/openshift-route-controller-manager-rhel8@sha256:8b75d993cd9febbdb7f2b77260630932d2d15a003a28f7e4d52ac20650f867e5_s390x |
| Red Hat | openshift4/ose-tests@sha256:77d86891fa9d350ea373d86f93eb96119dca0592dcdea112650ac2fc807e9317_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | openshift4/ose-tests@sha256:77d86891fa9d350ea373d86f93eb96119dca0592dcdea112650ac2fc807e9317_arm64, *, * |
…and 1333 more
Timeline
- Jul 31, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jul 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:11669 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2294000 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333122 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2348366 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://issues.redhat.com/browse/OCPBUGS-55309 advisory
- https://issues.redhat.com/browse/OCPBUGS-58274 advisory
- https://issues.redhat.com/browse/OCPBUGS-58891 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11669.json advisory
- https://access.redhat.com/security/cve/CVE-2024-6104 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-6104 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-6104 advisory
- https://access.redhat.com/security/cve/CVE-2024-45338 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-45338 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45338 advisory
- https://go.dev/cl/637536 advisory
- https://go.dev/issue/70906 advisory
- https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ advisory
- https://pkg.go.dev/vuln/GO-2024-3333 advisory
…and 12 more