VDB
RHSA-2025%3A14060
RHSA-2025%3A14060
PUBLISHED
CVSS 7.099999904632568 HIGH
A flaw was found in glog, a logging library. This vulnerability allows an unprivileged attacker to overwrite sensitive files via a symbolic link planted in a widely writable directory, exploiting the log file path predictability.
Risk Scores
CVSS 3.0
7.099999904632568
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:4611f49aaa0444d838108dc806e2171420b487028b5c521e7f2ecb26b33d9c6a_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:4611f49aaa0444d838108dc806e2171420b487028b5c521e7f2ecb26b33d9c6a_amd64, registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:4611f49aaa0444d838108dc806e2171420b487028b5c521e7f2ecb26b33d9c6a_amd64, registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:4611f49aaa0444d838108dc806e2171420b487028b5c521e7f2ecb26b33d9c6a_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:2e8baae5f84fcdd1bd80b5d2d437213a7ba49b7cff3914123c935bb55da52a61_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d706b06cf7bdc37ebe583e2cc2a1e3e85ef54d30add7fc1a73c6d1c9d40168dd_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d706b06cf7bdc37ebe583e2cc2a1e3e85ef54d30add7fc1a73c6d1c9d40168dd_arm64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:b011e5aa56276d093d6cb62b77a2f2cced97c16213f88eca5538d4ed96e30173_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:b011e5aa56276d093d6cb62b77a2f2cced97c16213f88eca5538d4ed96e30173_amd64, registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:b011e5aa56276d093d6cb62b77a2f2cced97c16213f88eca5538d4ed96e30173_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-installer-altinfra-rhel9@sha256:061e6e76256c66c57924b6de6f47a61fdd90cc2f234277defbed2611dbea8ef2_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | registry.redhat.io/openshift4/ose-installer-altinfra-rhel9@sha256:061e6e76256c66c57924b6de6f47a61fdd90cc2f234277defbed2611dbea8ef2_ppc64le, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-installer-rhel9@sha256:011bc300901dd7ee7ea0d4eec4158539182c2ae2d0e14b4822405d2e2f327a4d_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:c348636cc785be9aaf80dcd93ced6c53d09dffab78160b6920ce2356c17e1a36_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | registry.redhat.io/openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:c348636cc785be9aaf80dcd93ced6c53d09dffab78160b6920ce2356c17e1a36_arm64, registry.redhat.io/openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:c348636cc785be9aaf80dcd93ced6c53d09dffab78160b6920ce2356c17e1a36_arm64, registry.redhat.io/openshift4/ose-csi-snapshot-validation-webhook-rhel9@sha256:c348636cc785be9aaf80dcd93ced6c53d09dffab78160b6920ce2356c17e1a36_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-image-customization-controller-rhel9@sha256:230a320d1c186d8109e9087bf08cbb4547360ac6f2274a7bf5ef3d70da056ffe_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | registry.redhat.io/openshift4/ose-image-customization-controller-rhel9@sha256:230a320d1c186d8109e9087bf08cbb4547360ac6f2274a7bf5ef3d70da056ffe_arm64, registry.redhat.io/openshift4/ose-image-customization-controller-rhel9@sha256:230a320d1c186d8109e9087bf08cbb4547360ac6f2274a7bf5ef3d70da056ffe_arm64, registry.redhat.io/openshift4/ose-image-customization-controller-rhel9@sha256:230a320d1c186d8109e9087bf08cbb4547360ac6f2274a7bf5ef3d70da056ffe_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel9-operator@sha256:1db28b7472bbcdde92f56ee1edd46b8386d2f0f8b60d328db59cb3c5aba88eaa_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel9-operator@sha256:1db28b7472bbcdde92f56ee1edd46b8386d2f0f8b60d328db59cb3c5aba88eaa_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:3e664474ef48bc044523163bf2eac17d7c5aeb1be9fb5bfc785c96fdc6027d05_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:3e664474ef48bc044523163bf2eac17d7c5aeb1be9fb5bfc785c96fdc6027d05_ppc64le, registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:3e664474ef48bc044523163bf2eac17d7c5aeb1be9fb5bfc785c96fdc6027d05_ppc64le, registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:3e664474ef48bc044523163bf2eac17d7c5aeb1be9fb5bfc785c96fdc6027d05_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:a831f45601a3870f1562d264a698366fb2e82652503bc5bb7759fd05da2987f2_s390x as a component of Red Hat OpenShift Container Platform 4.17 | *, registry.redhat.io/openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:a831f45601a3870f1562d264a698366fb2e82652503bc5bb7759fd05da2987f2_s390x, registry.redhat.io/openshift4/ose-cluster-kube-cluster-api-rhel9-operator@sha256:a831f45601a3870f1562d264a698366fb2e82652503bc5bb7759fd05da2987f2_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-installer-rhel9@sha256:44965ea6a39cc928ea540e071f4e8b2b7555ffc483ca5716e8ea717f8a70520e_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | registry.redhat.io/openshift4/ose-installer-rhel9@sha256:44965ea6a39cc928ea540e071f4e8b2b7555ffc483ca5716e8ea717f8a70520e_ppc64le, registry.redhat.io/openshift4/ose-installer-rhel9@sha256:44965ea6a39cc928ea540e071f4e8b2b7555ffc483ca5716e8ea717f8a70520e_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-livenessprobe-rhel9@sha256:fe2371603d2ae57822df6e4eb8668659be9fa97c55e48ac42f38a27ae1c608ea_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, registry.redhat.io/openshift4/ose-csi-livenessprobe-rhel9@sha256:fe2371603d2ae57822df6e4eb8668659be9fa97c55e48ac42f38a27ae1c608ea_ppc64le, registry.redhat.io/openshift4/ose-csi-livenessprobe-rhel9@sha256:fe2371603d2ae57822df6e4eb8668659be9fa97c55e48ac42f38a27ae1c608ea_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-monitoring-rhel9-operator@sha256:5da94e0008462ef5aa1be7c992a6a81b3135192741ed20e6498675496c3628c2_ppc64le as a component of Red Hat OpenShift Container Platform 4.17 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-vmware-vsphere-csi-driver-rhel9@sha256:140669b51922f347a54443864060529aa137540bdb7feac1020895c590cfcf3d_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | *, registry.redhat.io/openshift4/ose-vmware-vsphere-csi-driver-rhel9@sha256:140669b51922f347a54443864060529aa137540bdb7feac1020895c590cfcf3d_amd64, registry.redhat.io/openshift4/ose-vmware-vsphere-csi-driver-rhel9@sha256:140669b51922f347a54443864060529aa137540bdb7feac1020895c590cfcf3d_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9@sha256:e2f82f2b83ec413ddc95a35e09db48b1b07eb528dba768fad04877e948738548_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9@sha256:e2f82f2b83ec413ddc95a35e09db48b1b07eb528dba768fad04877e948738548_arm64, registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel9@sha256:e2f82f2b83ec413ddc95a35e09db48b1b07eb528dba768fad04877e948738548_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel9@sha256:84285c1f00590324f817418d4c9d77c22e631ba050877ff8ff5299ffe2c4a0ab_arm64 as a component of Red Hat OpenShift Container Platform 4.17 | *, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel9@sha256:84285c1f00590324f817418d4c9d77c22e631ba050877ff8ff5299ffe2c4a0ab_arm64, registry.redhat.io/openshift4/ose-azure-cloud-node-manager-rhel9@sha256:84285c1f00590324f817418d4c9d77c22e631ba050877ff8ff5299ffe2c4a0ab_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:9dd51bfaa3c5851878c6d14061d4b86af13ab5324f1d84a26ae0723716449c58_s390x as a component of Red Hat OpenShift Container Platform 4.17 | registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:9dd51bfaa3c5851878c6d14061d4b86af13ab5324f1d84a26ae0723716449c58_s390x, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator@sha256:cff68a70b34e63aa9b921781c3fd17144e7c793c97e9e2f98f5a42302d5371cb_s390x as a component of Red Hat OpenShift Container Platform 4.17 | registry.redhat.io/openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator@sha256:cff68a70b34e63aa9b921781c3fd17144e7c793c97e9e2f98f5a42302d5371cb_s390x, registry.redhat.io/openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator@sha256:cff68a70b34e63aa9b921781c3fd17144e7c793c97e9e2f98f5a42302d5371cb_s390x, registry.redhat.io/openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator@sha256:cff68a70b34e63aa9b921781c3fd17144e7c793c97e9e2f98f5a42302d5371cb_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-rhel9-operator@sha256:751a142524d8ae571c3ea91d2ed650cdb47559caf37b2dbfee42d456570c05bc_amd64 as a component of Red Hat OpenShift Container Platform 4.17 | registry.redhat.io/openshift4/ose-baremetal-rhel9-operator@sha256:751a142524d8ae571c3ea91d2ed650cdb47559caf37b2dbfee42d456570c05bc_amd64, registry.redhat.io/openshift4/ose-baremetal-rhel9-operator@sha256:751a142524d8ae571c3ea91d2ed650cdb47559caf37b2dbfee42d456570c05bc_amd64, registry.redhat.io/openshift4/ose-baremetal-rhel9-operator@sha256:751a142524d8ae571c3ea91d2ed650cdb47559caf37b2dbfee42d456570c05bc_amd64 |
…and 1289 more
Timeline
- Aug 27, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jun 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:14060 advisory
- https://access.redhat.com/security/cve/CVE-2024-45339 advisory
- https://access.redhat.com/security/cve/CVE-2025-22869 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14060.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2342463 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45339 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45339 advisory
- https://github.com/golang/glog/pull/74 advisory
- https://github.com/golang/glog/pull/74/commits/b8741656e406e66d6992bc2c9575e460ecaa0ec2 advisory
- https://groups.google.com/g/golang-announce/c/H-Q4ouHWyKs advisory
- https://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File advisory
- https://pkg.go.dev/vuln/GO-2025-3372 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2348367 issue
- https://www.cve.org/CVERecord?id=CVE-2025-22869 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-22869 advisory
- https://go.dev/cl/652135 advisory
- https://go.dev/issue/71931 advisory
- https://pkg.go.dev/vuln/GO-2025-3487 advisory