Red Hat Security AdvisoryRHSA-2024:4853
OpenShift Container Platform 4.15.24 packages and security update
Released 2024-07-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.15 haproxy-2.6.13-4.rhaos4.15.el8, haproxy26-2.6.13-4.rhaos4.15.el8, podman-3:4.4.1-26.2.rhaos4.15.el8 +12
Fixes 2 records
Priority MEDIUM 45
HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unspecified other impact upon misinterpretation of a path_end rule, such as routing…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.01514 · Published 2023-11-28 · Partial fix CWE-116
Priority LOW 27
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00358 · Published 2024-06-24 · Partial fix · 0.7.7 CWE-532
