VDB
RHSA-2025%3A14859
RHSA-2025%3A14859
PUBLISHED
CVSS 7.099999904632568 HIGH
A flaw was found in glog, a logging library. This vulnerability allows an unprivileged attacker to overwrite sensitive files via a symbolic link planted in a widely writable directory, exploiting the log file path predictability.
Risk Scores
CVSS 3.0
7.099999904632568
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:2da3eb9c7a4d8bdfeac841f834cdde6031bf64b14a6e9b407284bdf64eb08fc9_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:2da3eb9c7a4d8bdfeac841f834cdde6031bf64b14a6e9b407284bdf64eb08fc9_ppc64le, registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:2da3eb9c7a4d8bdfeac841f834cdde6031bf64b14a6e9b407284bdf64eb08fc9_ppc64le, registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9@sha256:2da3eb9c7a4d8bdfeac841f834cdde6031bf64b14a6e9b407284bdf64eb08fc9_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:2002c409bd3e1960a8d79f081dd43e2150582103e47d20c7bcfd797b863f0ebb_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:2002c409bd3e1960a8d79f081dd43e2150582103e47d20c7bcfd797b863f0ebb_s390x, *, registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:2002c409bd3e1960a8d79f081dd43e2150582103e47d20c7bcfd797b863f0ebb_s390x |
| Red Hat | registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:30410ca54aab3dec563732bc96b4083bacc14857b35a627d3075fb3f382bb5d1_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:30410ca54aab3dec563732bc96b4083bacc14857b35a627d3075fb3f382bb5d1_amd64, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:30410ca54aab3dec563732bc96b4083bacc14857b35a627d3075fb3f382bb5d1_amd64, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9@sha256:30410ca54aab3dec563732bc96b4083bacc14857b35a627d3075fb3f382bb5d1_amd64 |
| Red Hat | registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:d7f20821a3d2fe212daa044bd18db871477d9e4419cba64b391727183ec53c67_s390x as a component of Red Hat OpenShift Container Platform 4.16 | *, *, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9@sha256:d7f20821a3d2fe212daa044bd18db871477d9e4419cba64b391727183ec53c67_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:eef5cd08dda4e3ebdfb58cadec73ea48aa936058cc85656028e6f27e1ae51031_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:eef5cd08dda4e3ebdfb58cadec73ea48aa936058cc85656028e6f27e1ae51031_arm64, registry.redhat.io/openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:eef5cd08dda4e3ebdfb58cadec73ea48aa936058cc85656028e6f27e1ae51031_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel9@sha256:c0010e7eea382e1026a9c5086ac2793cc59ac48495ca6742df510bcf5f32459c_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel9@sha256:c0010e7eea382e1026a9c5086ac2793cc59ac48495ca6742df510bcf5f32459c_ppc64le, registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel9@sha256:c0010e7eea382e1026a9c5086ac2793cc59ac48495ca6742df510bcf5f32459c_ppc64le, registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel9@sha256:c0010e7eea382e1026a9c5086ac2793cc59ac48495ca6742df510bcf5f32459c_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-operator-admission-webhook-rhel9@sha256:39d76960b7cb841a41fa2f8176150fe2c3b9dc2814324dbba6135b39e05a706a_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, *, registry.redhat.io/openshift4/ose-prometheus-operator-admission-webhook-rhel9@sha256:39d76960b7cb841a41fa2f8176150fe2c3b9dc2814324dbba6135b39e05a706a_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:f8d6d8de975abf876dac43f40bf80faccb60eb2432f3463ee8852775b500db52_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:f8d6d8de975abf876dac43f40bf80faccb60eb2432f3463ee8852775b500db52_s390x, *, registry.redhat.io/openshift4/ose-cluster-olm-rhel9-operator@sha256:f8d6d8de975abf876dac43f40bf80faccb60eb2432f3463ee8852775b500db52_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator@sha256:157ee17a484dc094f997d232ea0ead6a75a1cac854f2469a1e769c246a2637d5_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator@sha256:157ee17a484dc094f997d232ea0ead6a75a1cac854f2469a1e769c246a2637d5_amd64, *, registry.redhat.io/openshift4/ose-cluster-csi-snapshot-controller-rhel9-operator@sha256:157ee17a484dc094f997d232ea0ead6a75a1cac854f2469a1e769c246a2637d5_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:99766a65e172e428d414df1359e85884abd99dda123702b8090856904aaf469c_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:99766a65e172e428d414df1359e85884abd99dda123702b8090856904aaf469c_amd64, registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:99766a65e172e428d414df1359e85884abd99dda123702b8090856904aaf469c_amd64, registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:99766a65e172e428d414df1359e85884abd99dda123702b8090856904aaf469c_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-storage-rhel9-operator@sha256:cdef1a8e18a869aca5b67ede167cd6c481a9f7f57593dd6eab02714fdffc4c43_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-cluster-storage-rhel9-operator@sha256:cdef1a8e18a869aca5b67ede167cd6c481a9f7f57593dd6eab02714fdffc4c43_s390x, registry.redhat.io/openshift4/ose-cluster-storage-rhel9-operator@sha256:cdef1a8e18a869aca5b67ede167cd6c481a9f7f57593dd6eab02714fdffc4c43_s390x, registry.redhat.io/openshift4/ose-cluster-storage-rhel9-operator@sha256:cdef1a8e18a869aca5b67ede167cd6c481a9f7f57593dd6eab02714fdffc4c43_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:0e32e8e7ef0f4b74f5544addca4f6dc9077d61b8727db07acf69f27a9d29e8da_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-cluster-kube-apiserver-rhel9-operator@sha256:0e32e8e7ef0f4b74f5544addca4f6dc9077d61b8727db07acf69f27a9d29e8da_arm64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-kube-proxy-rhel9@sha256:5cfc388df49f6c84fb1cf21c2b628b0f8852d08fa725b4da5f6fd0cd5d34deaa_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-kube-proxy-rhel9@sha256:5cfc388df49f6c84fb1cf21c2b628b0f8852d08fa725b4da5f6fd0cd5d34deaa_ppc64le, registry.redhat.io/openshift4/ose-kube-proxy-rhel9@sha256:5cfc388df49f6c84fb1cf21c2b628b0f8852d08fa725b4da5f6fd0cd5d34deaa_ppc64le, registry.redhat.io/openshift4/ose-kube-proxy-rhel9@sha256:5cfc388df49f6c84fb1cf21c2b628b0f8852d08fa725b4da5f6fd0cd5d34deaa_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-operator-marketplace-rhel9@sha256:d2ea02154aa9c69b4456063fbc28e66d5af72d0dbc76dc2a179e3f509166fb64_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-operator-marketplace-rhel9@sha256:d2ea02154aa9c69b4456063fbc28e66d5af72d0dbc76dc2a179e3f509166fb64_arm64, registry.redhat.io/openshift4/ose-operator-marketplace-rhel9@sha256:d2ea02154aa9c69b4456063fbc28e66d5af72d0dbc76dc2a179e3f509166fb64_arm64, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-rhel9-operator@sha256:35bba97dd4755a1fa689ba8f21ca1c7032bb33edefa1d0f3876ad8ce51cd3971_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-rhel9-operator@sha256:35bba97dd4755a1fa689ba8f21ca1c7032bb33edefa1d0f3876ad8ce51cd3971_s390x, registry.redhat.io/openshift4/ose-csi-driver-shared-resource-rhel9-operator@sha256:35bba97dd4755a1fa689ba8f21ca1c7032bb33edefa1d0f3876ad8ce51cd3971_s390x, registry.redhat.io/openshift4/ose-csi-driver-shared-resource-rhel9-operator@sha256:35bba97dd4755a1fa689ba8f21ca1c7032bb33edefa1d0f3876ad8ce51cd3971_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-operator-registry-rhel9@sha256:5ead9517953ce770b075be8bcc34dc046753b1a5dbd1a68083c2c6b1ec91bae5_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-operator-registry-rhel9@sha256:5ead9517953ce770b075be8bcc34dc046753b1a5dbd1a68083c2c6b1ec91bae5_arm64, *, registry.redhat.io/openshift4/ose-operator-registry-rhel9@sha256:5ead9517953ce770b075be8bcc34dc046753b1a5dbd1a68083c2c6b1ec91bae5_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-kube-state-metrics-rhel9@sha256:43a34b06bb917ae30ec529dc32093ea2e644ceaf121239adb5d5d59d40f3e743_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-kube-state-metrics-rhel9@sha256:43a34b06bb917ae30ec529dc32093ea2e644ceaf121239adb5d5d59d40f3e743_amd64, registry.redhat.io/openshift4/ose-kube-state-metrics-rhel9@sha256:43a34b06bb917ae30ec529dc32093ea2e644ceaf121239adb5d5d59d40f3e743_amd64, registry.redhat.io/openshift4/ose-kube-state-metrics-rhel9@sha256:43a34b06bb917ae30ec529dc32093ea2e644ceaf121239adb5d5d59d40f3e743_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-dns-rhel9-operator@sha256:572f1da99a0264dfd47bc20cd6b733d767805e1276c11ab9a7e5524953e664c2_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-cluster-dns-rhel9-operator@sha256:572f1da99a0264dfd47bc20cd6b733d767805e1276c11ab9a7e5524953e664c2_s390x, registry.redhat.io/openshift4/ose-cluster-dns-rhel9-operator@sha256:572f1da99a0264dfd47bc20cd6b733d767805e1276c11ab9a7e5524953e664c2_s390x, registry.redhat.io/openshift4/ose-cluster-dns-rhel9-operator@sha256:572f1da99a0264dfd47bc20cd6b733d767805e1276c11ab9a7e5524953e664c2_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel9@sha256:864dbae5b29d7fde48caf3e48421fb7fab5a5b5c26af5f68c28f34276d69b3f2_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel9@sha256:864dbae5b29d7fde48caf3e48421fb7fab5a5b5c26af5f68c28f34276d69b3f2_amd64, registry.redhat.io/openshift4/ose-azure-cloud-controller-manager-rhel9@sha256:864dbae5b29d7fde48caf3e48421fb7fab5a5b5c26af5f68c28f34276d69b3f2_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-multus-whereabouts-ipam-cni-rhel9@sha256:ca1d4327f63c10e574ec7108e42b51754a89660ab3a9f894edc6fe218f6b64b7_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-multus-whereabouts-ipam-cni-rhel9@sha256:ca1d4327f63c10e574ec7108e42b51754a89660ab3a9f894edc6fe218f6b64b7_ppc64le, registry.redhat.io/openshift4/ose-multus-whereabouts-ipam-cni-rhel9@sha256:ca1d4327f63c10e574ec7108e42b51754a89660ab3a9f894edc6fe218f6b64b7_ppc64le |
…and 1294 more
Timeline
- Sep 4, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jun 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:14859 advisory
- https://access.redhat.com/security/cve/CVE-2024-45339 advisory
- https://access.redhat.com/security/cve/CVE-2025-22869 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14859.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2342463 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45339 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45339 advisory
- https://github.com/golang/glog/pull/74 advisory
- https://github.com/golang/glog/pull/74/commits/b8741656e406e66d6992bc2c9575e460ecaa0ec2 advisory
- https://groups.google.com/g/golang-announce/c/H-Q4ouHWyKs advisory
- https://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File advisory
- https://pkg.go.dev/vuln/GO-2025-3372 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2348367 issue
- https://www.cve.org/CVERecord?id=CVE-2025-22869 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-22869 advisory
- https://go.dev/cl/652135 advisory
- https://go.dev/issue/71931 advisory
- https://pkg.go.dev/vuln/GO-2025-3487 advisory