VDB
RHSA-2025%3A17671
RHSA-2025%3A17671
PUBLISHED
CVSS 7.099999904632568 HIGH
A flaw was found in glog, a logging library. This vulnerability allows an unprivileged attacker to overwrite sensitive files via a symbolic link planted in a widely writable directory, exploiting the log file path predictability.
Risk Scores
CVSS 3.0
7.099999904632568
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel8@sha256:89304f9bda33d91b070e3ef14896e8670d39c1947b2f3aa9eb6e6dd331087f82_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, registry.redhat.io/openshift4/ose-vsphere-problem-detector-rhel8@sha256:89304f9bda33d91b070e3ef14896e8670d39c1947b2f3aa9eb6e6dd331087f82_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:7fff81a245602015d4d53a9d1c3c3806f0ec87a88991c6969b2777f2abeab77c_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:7fff81a245602015d4d53a9d1c3c3806f0ec87a88991c6969b2777f2abeab77c_amd64, registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:7fff81a245602015d4d53a9d1c3c3806f0ec87a88991c6969b2777f2abeab77c_amd64, registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:7fff81a245602015d4d53a9d1c3c3806f0ec87a88991c6969b2777f2abeab77c_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-apiserver-operator@sha256:36d9a0f7a9819731fed1819fd3457ec6c55515ba4f00fe5906d36a7030d96986_amd64 | |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-api-rhel8@sha256:bdfe43c160f50bf59f33210eb87bb37786fc669aecfac07dc0a43f32e86efe8f_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-cluster-api-rhel8@sha256:bdfe43c160f50bf59f33210eb87bb37786fc669aecfac07dc0a43f32e86efe8f_amd64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-deployer@sha256:415cfbf92c0b8e60be03455ac480fb593d2f22b70c7a9c7ce4bf8b8ea856a003_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, registry.redhat.io/openshift4/ose-deployer@sha256:415cfbf92c0b8e60be03455ac480fb593d2f22b70c7a9c7ce4bf8b8ea856a003_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-kube-state-metrics@sha256:3813fdac5f736dbdb6ae795d67a5fab047bec134ad0ae67f6939f385a1553353_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-kube-state-metrics@sha256:3813fdac5f736dbdb6ae795d67a5fab047bec134ad0ae67f6939f385a1553353_amd64, registry.redhat.io/openshift4/ose-kube-state-metrics@sha256:3813fdac5f736dbdb6ae795d67a5fab047bec134ad0ae67f6939f385a1553353_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel8@sha256:4f0964f07a796d304a1b866b030aa5e5d3add81aade90aa588325fb822a29e11_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel8@sha256:4f0964f07a796d304a1b866b030aa5e5d3add81aade90aa588325fb822a29e11_amd64, registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel8@sha256:4f0964f07a796d304a1b866b030aa5e5d3add81aade90aa588325fb822a29e11_amd64, registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel8@sha256:4f0964f07a796d304a1b866b030aa5e5d3add81aade90aa588325fb822a29e11_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-csi-livenessprobe-rhel8@sha256:9c8894a1ec078509118e688aca57397c9594d6654dc4b450419e9a2cee230328_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-csi-livenessprobe-rhel8@sha256:9c8894a1ec078509118e688aca57397c9594d6654dc4b450419e9a2cee230328_amd64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:57a3f118af69d187a9e8368e45f8356ed0c449160873423e6e930d2bde330fb6_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:57a3f118af69d187a9e8368e45f8356ed0c449160873423e6e930d2bde330fb6_amd64, registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:57a3f118af69d187a9e8368e45f8356ed0c449160873423e6e930d2bde330fb6_amd64, registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:57a3f118af69d187a9e8368e45f8356ed0c449160873423e6e930d2bde330fb6_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:ff42fa826b6f4af932a79141900432e17bee6baf1c2e6bcfa26b70ed3a4a1170_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:ff42fa826b6f4af932a79141900432e17bee6baf1c2e6bcfa26b70ed3a4a1170_amd64, *, registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:ff42fa826b6f4af932a79141900432e17bee6baf1c2e6bcfa26b70ed3a4a1170_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-must-gather@sha256:485d468a3f4d8e47be9fba482759c70eb88fc3b0433cd341404febf108ba72c4_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-must-gather@sha256:485d468a3f4d8e47be9fba482759c70eb88fc3b0433cd341404febf108ba72c4_amd64, registry.redhat.io/openshift4/ose-must-gather@sha256:485d468a3f4d8e47be9fba482759c70eb88fc3b0433cd341404febf108ba72c4_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-insights-rhel8-operator@sha256:2806f5de0bfcbf36861d273a1a38d58c9a0902451d0e8cdfcaf1356d08899995_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-insights-rhel8-operator@sha256:2806f5de0bfcbf36861d273a1a38d58c9a0902451d0e8cdfcaf1356d08899995_amd64, registry.redhat.io/openshift4/ose-insights-rhel8-operator@sha256:2806f5de0bfcbf36861d273a1a38d58c9a0902451d0e8cdfcaf1356d08899995_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-alertmanager@sha256:f0732aa0828fa2cae6c9ff9021c883390a12a279b61f8534ac97b8299cef66e4_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-prometheus-alertmanager@sha256:f0732aa0828fa2cae6c9ff9021c883390a12a279b61f8534ac97b8299cef66e4_amd64, registry.redhat.io/openshift4/ose-prometheus-alertmanager@sha256:f0732aa0828fa2cae6c9ff9021c883390a12a279b61f8534ac97b8299cef66e4_amd64, registry.redhat.io/openshift4/ose-prometheus-alertmanager@sha256:f0732aa0828fa2cae6c9ff9021c883390a12a279b61f8534ac97b8299cef66e4_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:882a82c950575baccf7ffbce4b793cee4a4e8da49233129b8ee72f74cf3b4a88_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:882a82c950575baccf7ffbce4b793cee4a4e8da49233129b8ee72f74cf3b4a88_amd64, registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel8@sha256:882a82c950575baccf7ffbce4b793cee4a4e8da49233129b8ee72f74cf3b4a88_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-authentication-operator@sha256:e8dfe2cb9ac8a5c74ca5ae41ef4a3798d338fdcc678a5db1a40715152e5cb471_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-cluster-authentication-operator@sha256:e8dfe2cb9ac8a5c74ca5ae41ef4a3798d338fdcc678a5db1a40715152e5cb471_amd64, registry.redhat.io/openshift4/ose-cluster-authentication-operator@sha256:e8dfe2cb9ac8a5c74ca5ae41ef4a3798d338fdcc678a5db1a40715152e5cb471_amd64, registry.redhat.io/openshift4/ose-cluster-authentication-operator@sha256:e8dfe2cb9ac8a5c74ca5ae41ef4a3798d338fdcc678a5db1a40715152e5cb471_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni@sha256:35ebea5a6a1e652b0133cb980e32b394c97895b1ee39a8168d52bb00b1ec7bbc_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-multus-cni@sha256:35ebea5a6a1e652b0133cb980e32b394c97895b1ee39a8168d52bb00b1ec7bbc_amd64, registry.redhat.io/openshift4/ose-multus-cni@sha256:35ebea5a6a1e652b0133cb980e32b394c97895b1ee39a8168d52bb00b1ec7bbc_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:08379ce536f82608da6db7b60c565c936ffe87aee78e236016686611482e06c6_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, *, registry.redhat.io/openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:08379ce536f82608da6db7b60c565c936ffe87aee78e236016686611482e06c6_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:78e659210f7b31df84f27ae6f4b74fabd9e408dca46c2fa402d01aac62181a1a_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | *, registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:78e659210f7b31df84f27ae6f4b74fabd9e408dca46c2fa402d01aac62181a1a_amd64, registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:78e659210f7b31df84f27ae6f4b74fabd9e408dca46c2fa402d01aac62181a1a_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel8@sha256:3dbf34e5e5c0c459e84b6e3cfe6c84df523f53f122c78a1b3b47bff837d0704f_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel8@sha256:3dbf34e5e5c0c459e84b6e3cfe6c84df523f53f122c78a1b3b47bff837d0704f_amd64, registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel8@sha256:3dbf34e5e5c0c459e84b6e3cfe6c84df523f53f122c78a1b3b47bff837d0704f_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:08379ce536f82608da6db7b60c565c936ffe87aee78e236016686611482e06c6_amd64 as a component of Red Hat OpenShift Container Platform 4.12 | registry.redhat.io/openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8@sha256:08379ce536f82608da6db7b60c565c936ffe87aee78e236016686611482e06c6_amd64, *, * |
…and 361 more
Timeline
- Oct 16, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jun 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:17671 advisory
- https://access.redhat.com/security/cve/CVE-2024-45339 advisory
- https://access.redhat.com/security/cve/CVE-2025-22868 advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17671.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2342463 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45339 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45339 advisory
- https://github.com/golang/glog/pull/74 advisory
- https://github.com/golang/glog/pull/74/commits/b8741656e406e66d6992bc2c9575e460ecaa0ec2 advisory
- https://groups.google.com/g/golang-announce/c/H-Q4ouHWyKs advisory
- https://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File advisory
- https://pkg.go.dev/vuln/GO-2025-3372 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2348366 issue
- https://www.cve.org/CVERecord?id=CVE-2025-22868 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-22868 advisory
- https://go.dev/cl/652155 advisory
- https://go.dev/issue/71490 advisory
- https://pkg.go.dev/vuln/GO-2025-3488 advisory
…and 6 more