VDB
RHSA-2025%3A4019
RHSA-2025%3A4019
PUBLISHED
CVSS 6.5 MEDIUM
A vulnerability was found in Helm that may lead to sensitive information disclosure. When the --dry-run flag is used in Helm 3, it displays values of secrets. Helm 2 just displays the fact that a secret has been created.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-service-ca-rhel9-operator@sha256:3b27608a9e6c96ea99c72c43d41e94c3355bd26063914e870266329b0e515582_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-service-ca-rhel9-operator@sha256:3b27608a9e6c96ea99c72c43d41e94c3355bd26063914e870266329b0e515582_arm64, openshift4/ose-service-ca-rhel9-operator@sha256:3b27608a9e6c96ea99c72c43d41e94c3355bd26063914e870266329b0e515582_arm64, openshift4/ose-service-ca-rhel9-operator@sha256:3b27608a9e6c96ea99c72c43d41e94c3355bd26063914e870266329b0e515582_arm64 |
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:4dd53b7db38211a5e705335072dd190cddeb76fc4e9d30ead4e685f856fa1ee0_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-installer-artifacts-rhel9@sha256:4dd53b7db38211a5e705335072dd190cddeb76fc4e9d30ead4e685f856fa1ee0_ppc64le, openshift4/ose-installer-artifacts-rhel9@sha256:4dd53b7db38211a5e705335072dd190cddeb76fc4e9d30ead4e685f856fa1ee0_ppc64le, * |
| Red Hat | openshift4/ose-machine-config-rhel9-operator@sha256:6045c4f6e023d856d708d855d444263eb62be9d7f0bec0fef62601aa05ae108b_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | *, *, * |
| Red Hat | openshift4/ose-csi-node-driver-registrar-rhel9@sha256:04afab4b1a6387da2359e63e881c4b5595377acac0b9c6e3a2fea1e74cc94c47_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-csi-node-driver-registrar-rhel9@sha256:04afab4b1a6387da2359e63e881c4b5595377acac0b9c6e3a2fea1e74cc94c47_arm64, openshift4/ose-csi-node-driver-registrar-rhel9@sha256:04afab4b1a6387da2359e63e881c4b5595377acac0b9c6e3a2fea1e74cc94c47_arm64, openshift4/ose-csi-node-driver-registrar-rhel9@sha256:04afab4b1a6387da2359e63e881c4b5595377acac0b9c6e3a2fea1e74cc94c47_arm64 |
| Red Hat | openshift4/ose-oauth-apiserver-rhel9@sha256:6297086a35d596acb996c9ef8c7637b8860892bb73b8e0f7c9c1ed302185d6e1_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-oauth-apiserver-rhel9@sha256:6297086a35d596acb996c9ef8c7637b8860892bb73b8e0f7c9c1ed302185d6e1_amd64, openshift4/ose-oauth-apiserver-rhel9@sha256:6297086a35d596acb996c9ef8c7637b8860892bb73b8e0f7c9c1ed302185d6e1_amd64, openshift4/ose-oauth-apiserver-rhel9@sha256:6297086a35d596acb996c9ef8c7637b8860892bb73b8e0f7c9c1ed302185d6e1_amd64 |
| Red Hat | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:e0cff9dc6abc206a3ca036f510b1ac0749c5d5db6516f707a333bf2c1ab2d30b_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:e0cff9dc6abc206a3ca036f510b1ac0749c5d5db6516f707a333bf2c1ab2d30b_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:e0cff9dc6abc206a3ca036f510b1ac0749c5d5db6516f707a333bf2c1ab2d30b_ppc64le, openshift4/ose-ovn-kubernetes-microshift-rhel9@sha256:e0cff9dc6abc206a3ca036f510b1ac0749c5d5db6516f707a333bf2c1ab2d30b_ppc64le |
| Red Hat | openshift4/ose-agent-installer-node-agent-rhel9@sha256:4b9cd365111328471be56d56bbe3a8cb957d858c87e266b4bf75a8da708538dc_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-agent-installer-node-agent-rhel9@sha256:4b9cd365111328471be56d56bbe3a8cb957d858c87e266b4bf75a8da708538dc_s390x, openshift4/ose-agent-installer-node-agent-rhel9@sha256:4b9cd365111328471be56d56bbe3a8cb957d858c87e266b4bf75a8da708538dc_s390x, openshift4/ose-agent-installer-node-agent-rhel9@sha256:4b9cd365111328471be56d56bbe3a8cb957d858c87e266b4bf75a8da708538dc_s390x |
| Red Hat | openshift4/azure-service-rhel9-operator@sha256:d4bd7acd425fbf9c66cff2aaec1eaed24a536e0265a9432e1cfc8c4b7625419e_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/azure-service-rhel9-operator@sha256:d4bd7acd425fbf9c66cff2aaec1eaed24a536e0265a9432e1cfc8c4b7625419e_arm64, openshift4/azure-service-rhel9-operator@sha256:d4bd7acd425fbf9c66cff2aaec1eaed24a536e0265a9432e1cfc8c4b7625419e_arm64, openshift4/azure-service-rhel9-operator@sha256:d4bd7acd425fbf9c66cff2aaec1eaed24a536e0265a9432e1cfc8c4b7625419e_arm64 |
| Red Hat | openshift4/ose-vsphere-csi-driver-rhel9@sha256:ca799c831154381b69cf8127a80b73d13646c7faa4a0be823181ec469fe33990_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-vsphere-csi-driver-rhel9@sha256:ca799c831154381b69cf8127a80b73d13646c7faa4a0be823181ec469fe33990_amd64, *, openshift4/ose-vsphere-csi-driver-rhel9@sha256:ca799c831154381b69cf8127a80b73d13646c7faa4a0be823181ec469fe33990_amd64 |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:649757535ded9e58e14143abd0b768729adc3685482d82aef12cc29bd0db4818_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:649757535ded9e58e14143abd0b768729adc3685482d82aef12cc29bd0db4818_s390x, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:649757535ded9e58e14143abd0b768729adc3685482d82aef12cc29bd0db4818_s390x, * |
| Red Hat | openshift4/ose-installer-artifacts-rhel9@sha256:d782dad3934699a96c48ea2be1bc6dea7c0ae1ca157a08982381eb23fad2771b_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-installer-artifacts-rhel9@sha256:d782dad3934699a96c48ea2be1bc6dea7c0ae1ca157a08982381eb23fad2771b_s390x, openshift4/ose-installer-artifacts-rhel9@sha256:d782dad3934699a96c48ea2be1bc6dea7c0ae1ca157a08982381eb23fad2771b_s390x, openshift4/ose-installer-artifacts-rhel9@sha256:d782dad3934699a96c48ea2be1bc6dea7c0ae1ca157a08982381eb23fad2771b_s390x |
| Red Hat | openshift4/ose-operator-lifecycle-manager-rhel9@sha256:4ab5a5501a1b5f28d0eb743ed4f484ad2aab4ef0b02701ea5e051b0c4e785c4a_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-operator-lifecycle-manager-rhel9@sha256:4ab5a5501a1b5f28d0eb743ed4f484ad2aab4ef0b02701ea5e051b0c4e785c4a_ppc64le, openshift4/ose-operator-lifecycle-manager-rhel9@sha256:4ab5a5501a1b5f28d0eb743ed4f484ad2aab4ef0b02701ea5e051b0c4e785c4a_ppc64le, openshift4/ose-operator-lifecycle-manager-rhel9@sha256:4ab5a5501a1b5f28d0eb743ed4f484ad2aab4ef0b02701ea5e051b0c4e785c4a_ppc64le |
| Red Hat | openshift4/ose-prometheus-alertmanager-rhel9@sha256:025aa071d90de908a246ef9b091f053303f07f6a7f2a69ba8c9e246c2697901d_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-prometheus-alertmanager-rhel9@sha256:025aa071d90de908a246ef9b091f053303f07f6a7f2a69ba8c9e246c2697901d_s390x, openshift4/ose-prometheus-alertmanager-rhel9@sha256:025aa071d90de908a246ef9b091f053303f07f6a7f2a69ba8c9e246c2697901d_s390x, openshift4/ose-prometheus-alertmanager-rhel9@sha256:025aa071d90de908a246ef9b091f053303f07f6a7f2a69ba8c9e246c2697901d_s390x |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel9@sha256:bce3f36f02be04b219f243cd9194fb203c0ab56c4decb63a370d1e1e8d2896e1_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-agent-installer-api-server-rhel9@sha256:bce3f36f02be04b219f243cd9194fb203c0ab56c4decb63a370d1e1e8d2896e1_ppc64le, openshift4/ose-agent-installer-api-server-rhel9@sha256:bce3f36f02be04b219f243cd9194fb203c0ab56c4decb63a370d1e1e8d2896e1_ppc64le, openshift4/ose-agent-installer-api-server-rhel9@sha256:bce3f36f02be04b219f243cd9194fb203c0ab56c4decb63a370d1e1e8d2896e1_ppc64le |
| Red Hat | openshift4/ose-service-ca-rhel9-operator@sha256:a651aea565f3b73a73ed05fde45be3acf193bebafd5b0aaa868321997f298f8f_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-service-ca-rhel9-operator@sha256:a651aea565f3b73a73ed05fde45be3acf193bebafd5b0aaa868321997f298f8f_ppc64le, openshift4/ose-service-ca-rhel9-operator@sha256:a651aea565f3b73a73ed05fde45be3acf193bebafd5b0aaa868321997f298f8f_ppc64le, * |
| Red Hat | openshift4/ose-agent-installer-api-server-rhel9@sha256:19b1d33ab2695a7daacc84ab0fc3d0f56a2abcd7ff827fd16d3657541921a21a_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-agent-installer-api-server-rhel9@sha256:19b1d33ab2695a7daacc84ab0fc3d0f56a2abcd7ff827fd16d3657541921a21a_arm64, *, openshift4/ose-agent-installer-api-server-rhel9@sha256:19b1d33ab2695a7daacc84ab0fc3d0f56a2abcd7ff827fd16d3657541921a21a_arm64 |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:649757535ded9e58e14143abd0b768729adc3685482d82aef12cc29bd0db4818_s390x as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:649757535ded9e58e14143abd0b768729adc3685482d82aef12cc29bd0db4818_s390x, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:649757535ded9e58e14143abd0b768729adc3685482d82aef12cc29bd0db4818_s390x, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:649757535ded9e58e14143abd0b768729adc3685482d82aef12cc29bd0db4818_s390x |
| Red Hat | openshift4/ose-cluster-monitoring-rhel9-operator@sha256:976d376fde66723336cea59bff2b5e167e8e41b7d51b94e5ff6a8a1ffbe4684b_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-cluster-monitoring-rhel9-operator@sha256:976d376fde66723336cea59bff2b5e167e8e41b7d51b94e5ff6a8a1ffbe4684b_amd64, openshift4/ose-cluster-monitoring-rhel9-operator@sha256:976d376fde66723336cea59bff2b5e167e8e41b7d51b94e5ff6a8a1ffbe4684b_amd64 |
| Red Hat | openshift4/ose-multus-cni-rhel9@sha256:ee24fd52979925092266a76af5c2104d12a3cef348560c78e29c2bd80203ab2a_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | openshift4/ose-multus-cni-rhel9@sha256:ee24fd52979925092266a76af5c2104d12a3cef348560c78e29c2bd80203ab2a_ppc64le, *, openshift4/ose-multus-cni-rhel9@sha256:ee24fd52979925092266a76af5c2104d12a3cef348560c78e29c2bd80203ab2a_ppc64le |
| Red Hat | openshift4/ose-cluster-dns-rhel9-operator@sha256:ff0d61843889dfcc15886db4bdf0db55f5b5f4c71b49c395a4402954135ddf34_s390x as a component of Red Hat OpenShift Container Platform 4.18 | *, openshift4/ose-cluster-dns-rhel9-operator@sha256:ff0d61843889dfcc15886db4bdf0db55f5b5f4c71b49c395a4402954135ddf34_s390x, openshift4/ose-cluster-dns-rhel9-operator@sha256:ff0d61843889dfcc15886db4bdf0db55f5b5f4c71b49c395a4402954135ddf34_s390x |
…and 1292 more
Timeline
- Apr 22, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:4019 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2268201 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2312631 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333971 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://issues.redhat.com/browse/OCPBUGS-33324 advisory
- https://issues.redhat.com/browse/OCPBUGS-35509 advisory
- https://issues.redhat.com/browse/OCPBUGS-36340 advisory
- https://issues.redhat.com/browse/OCPBUGS-36861 advisory
- https://issues.redhat.com/browse/OCPBUGS-38216 advisory
- https://issues.redhat.com/browse/OCPBUGS-38601 advisory
- https://issues.redhat.com/browse/OCPBUGS-38655 advisory
- https://issues.redhat.com/browse/OCPBUGS-38838 advisory
- https://issues.redhat.com/browse/OCPBUGS-38844 advisory
- https://issues.redhat.com/browse/OCPBUGS-38973 advisory
- https://issues.redhat.com/browse/OCPBUGS-39131 advisory
- https://issues.redhat.com/browse/OCPBUGS-39404 advisory
- https://issues.redhat.com/browse/OCPBUGS-39540 advisory
- https://issues.redhat.com/browse/OCPBUGS-41175 advisory
…and 62 more