VDB
RHSA-2025%3A11681
RHSA-2025%3A11681
PUBLISHED
CVSS 7.099999904632568 HIGH
A flaw was found in glog, a logging library. This vulnerability allows an unprivileged attacker to overwrite sensitive files via a symbolic link planted in a widely writable directory, exploiting the log file path predictability.
Risk Scores
CVSS 3.0
7.099999904632568
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:57dd55125f70744cbcb738f3d21caf1681d7af23ecfeb59d4354b6ddcc4cf9ae_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | openshift4/ose-olm-operator-controller-rhel9@sha256:1910b48181e9865ab054864896ac7efb9b4c9306e975b7e2274894ea1c083395_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | openshift4/ose-network-interface-bond-cni-rhel9@sha256:001ddb6e71529e93058c57ea573aa84e45246c9d102308d3c026307d8ecd0cea_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-network-interface-bond-cni-rhel9@sha256:001ddb6e71529e93058c57ea573aa84e45246c9d102308d3c026307d8ecd0cea_ppc64le |
| Red Hat | openshift4/ose-cluster-control-plane-machine-set-rhel9-operator@sha256:8c39afcde9b5943345e640fc5a8b8df08fa3c43cd595e8aac2ca9f65f54ce4c4_s390x as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | openshift4/ose-oauth-proxy-rhel9@sha256:68578ffdde30fa6a638725d3201a48f58802c6d76020aa17b530f98c3de67a9a_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | openshift4/ose-azure-disk-csi-driver-rhel9-operator@sha256:967fde48750ba022f6ff9b92b63812583faed306de89369d5d02448e294e450e_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | openshift4/ose-cluster-authentication-rhel9-operator@sha256:2a3e8e85fa227d770a8c9299fa539af7de995f9c522cc0fa651d4d784c97c383_s390x as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | openshift4/ose-multus-cni-microshift-rhel9@sha256:50e44f1a3b25c165fcf8ebc0caeec546c51c9bf552712af4026392447a31bda2_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-multus-cni-microshift-rhel9@sha256:50e44f1a3b25c165fcf8ebc0caeec546c51c9bf552712af4026392447a31bda2_arm64 |
| Red Hat | openshift4/ose-baremetal-runtimecfg-rhel9@sha256:a072258c29dc33f318d30a9845fd1ff7d4763785ed72a44e7a5d2565a609abd5_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | openshift4/ose-oauth-apiserver-rhel9@sha256:187e838c5583c01bf2e83e97559e6c751ad2470f73a0fd9e02cd9c740fdb1baa_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-oauth-apiserver-rhel9@sha256:187e838c5583c01bf2e83e97559e6c751ad2470f73a0fd9e02cd9c740fdb1baa_ppc64le |
| Red Hat | openshift4/ose-apiserver-network-proxy-rhel9@sha256:2ef6cac06f440ed500ce6c594205ca8883961579cf610632253a5e1d54e900b9_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-apiserver-network-proxy-rhel9@sha256:2ef6cac06f440ed500ce6c594205ca8883961579cf610632253a5e1d54e900b9_amd64 |
| Red Hat | openshift4/ose-hyperkube-rhel9@sha256:d23756530ffcf7804f50bc17459db7693ece9ec897daf119a11339f392687d26_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-hyperkube-rhel9@sha256:d23756530ffcf7804f50bc17459db7693ece9ec897daf119a11339f392687d26_ppc64le |
| Red Hat | openshift4/ose-networking-console-plugin-rhel9@sha256:f42ee93f81ac60b7c18c2da674d0a6d0389a49e0206f0fbc1261a56d396f8714_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-networking-console-plugin-rhel9@sha256:f42ee93f81ac60b7c18c2da674d0a6d0389a49e0206f0fbc1261a56d396f8714_s390x |
| Red Hat | openshift4/ose-prometheus-rhel9@sha256:70d25544ce05058e521601d0b70d7dc85639660882dfd240dbb6563f426e8b3b_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-prometheus-rhel9@sha256:70d25544ce05058e521601d0b70d7dc85639660882dfd240dbb6563f426e8b3b_ppc64le |
| Red Hat | openshift4/container-networking-plugins-microshift-rhel9@sha256:0d42b1837a862fbad60ac14a65c6fc4f445d810755c2ade1f2ce4e96c09ec16c_s390x as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/container-networking-plugins-microshift-rhel9@sha256:0d42b1837a862fbad60ac14a65c6fc4f445d810755c2ade1f2ce4e96c09ec16c_s390x |
| Red Hat | openshift4/ose-cli-artifacts-rhel9@sha256:d92e516efd9fbc74dc1cbea8ec6b8a42c07f18380de20106338e094b427c9ddc_s390x as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | openshift4/egress-router-cni-rhel9@sha256:a52d9c0ab9f4c98d21037681952ad8eb9b5e93f98097337fbaee5a2034f19d45_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/egress-router-cni-rhel9@sha256:a52d9c0ab9f4c98d21037681952ad8eb9b5e93f98097337fbaee5a2034f19d45_arm64 |
| Red Hat | openshift4/ose-csi-external-resizer-rhel9@sha256:2ab024942b1659956b075df7c60b8062539ebabb6c6c16cc6eb98fa40fd4d4f9_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | * |
| Red Hat | openshift4/ose-multus-networkpolicy-rhel9@sha256:c04f1a6612a5eb0c7d3eedb89ef0139d20b502510d0fcb473105a345817d2f3b_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-multus-networkpolicy-rhel9@sha256:c04f1a6612a5eb0c7d3eedb89ef0139d20b502510d0fcb473105a345817d2f3b_ppc64le |
| Red Hat | openshift4/ose-csi-snapshot-controller-rhel9@sha256:52aa61d48a9f7cd64b810838ef1fc9b855a4d7451130c2752c21b4d09a7d25fc_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | openshift4/ose-csi-snapshot-controller-rhel9@sha256:52aa61d48a9f7cd64b810838ef1fc9b855a4d7451130c2752c21b4d09a7d25fc_ppc64le |
…and 1308 more
Timeline
- Jul 30, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 14, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:11681 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2342463 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2367842 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2372501 issue
- https://issues.redhat.com/browse/OCPBUGS-36677 advisory
- https://issues.redhat.com/browse/OCPBUGS-54316 advisory
- https://issues.redhat.com/browse/OCPBUGS-54752 advisory
- https://issues.redhat.com/browse/OCPBUGS-56838 advisory
- https://issues.redhat.com/browse/OCPBUGS-56992 advisory
- https://issues.redhat.com/browse/OCPBUGS-58133 advisory
- https://issues.redhat.com/browse/OCPBUGS-58161 advisory
- https://issues.redhat.com/browse/OCPBUGS-58290 advisory
- https://issues.redhat.com/browse/OCPBUGS-58509 advisory
- https://issues.redhat.com/browse/OCPBUGS-59274 advisory
- https://issues.redhat.com/browse/OCPBUGS-59445 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11681.json advisory
- https://access.redhat.com/security/cve/CVE-2024-45339 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-45339 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45339 advisory
…and 20 more