Read the docs
TI-2024-05657 Aliases CVE-2024-6104GHSA-v6v8-xj6m-xwqh

go-retryablehttp can leak basic auth credentials to log files

Priority LOW 27CWE-532Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 29 fixed, 11 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-532.

Summary

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00358 29th percentileScored 2026-11-07
Fix Partial Shared library (HashiCorp): 0.7.7github.com/hashicorp/go-retryablehttp (Go): 0.7.7Red Hat: 60 advisoriesRed Hat: 29 fixed, 11 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HashiCorpShared librarybefore 0.7.70.7.7Patch availableCNA
—github.com/hashicorp/go-retryablehttp (Go)before 0.7.70.7.7Patch availableGHSA-v6v8-xj6m-xwqh
  • Shared library VendorHashiCorp Affected before 0.7.7 Fixed in 0.7.7 Patch available CNA
  • github.com/hashicorp/go-retryablehttp (Go) Vendor— Affected before 0.7.7 Fixed in 0.7.7 Patch available GHSA-v6v8-xj6m-xwqh

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:hashicorp:retryablehttp:*:*:*:*:*:go:*:*before 0.7.7VulnerableHashiCorp
  • cpe:2.3:a:hashicorp:retryablehttp:*:*:*:*:*:go:*:* Versions before 0.7.7 Vulnerable ·HashiCorp

Remediation

  • Fix · CNA Shared library (HashiCorp) Fixed in 0.7.7
  • Fix · GHSA-v6v8-xj6m-xwqh github.com/hashicorp/go-retryablehttp (Go) Fixed in 0.7.7 Advisory →

Red Hat 60 advisories

  • RHSA-2025:11669 Released 2025-07-31 · Red Hat rating Important
    OpenShift Container Platform 4.14.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-docker-registry, openshift4/ose-ibmcloud-cluster-api-controllers-rhel8, openshift4/ose-nutanix-machine-controllers-rhel8
  • RHSA-2025:9776 Released 2025-06-26 · Red Hat rating Important
    New RHCS 8.1 container image is now available in the Red Hat Ecosystem Catalog.
    • Red Hat Ceph Storage 8.1 Tools rhceph/grafana-rhel9, rhceph/keepalived-rhel9, rhceph/oauth2-proxy-rhel9 +4
  • RHSA-2025:3714 Released 2025-04-08 · Red Hat rating Critical
    cert-manager Operator for Red Hat OpenShift 1.14.2
    • cert-manager operator for Red Hat OpenShift 1.14 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
Show 57 more Red Hat advisories
  • RHSA-2025:1866 Released 2025-02-26 · Red Hat rating Important
    RHODF-4.14-RHEL-9 security update
    • RHODF 4.14 for RHEL 9 odf4/ocs-client-console-rhel9, odf4/ocs-metrics-exporter-rhel9, odf4/ocs-rhel9-operator +3
  • RHSA-2025:1865 Released 2025-02-26 · Red Hat rating Important
    RHODF-4.15-RHEL-9 security update
    • RHODF 4.15 for RHEL 9 odf4/ocs-client-console-rhel9, odf4/ocs-metrics-exporter-rhel9, odf4/ocs-rhel9-operator +4
  • RHSA-2025:1829 Released 2025-02-25 · Red Hat rating Important
    RHODF-4.16-RHEL-9 security update
    • RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/ocs-client-console-rhel9, odf4/ocs-rhel9-operator +5
  • RHSA-2024:6122 Released 2025-02-25 · Red Hat rating Important
    OpenShift Container Platform 4.18.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/azure-service-rhel9-operator +47
  • RHSA-2025:1116 Released 2025-02-13 · Red Hat rating Important
    OpenShift Container Platform 4.13.55 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-baremetal-machine-controllers, openshift4/ose-ibmcloud-machine-controllers-rhel8, openshift4/ose-nutanix-cloud-controller-manager-rhel8 +4
  • RHSA-2025:0536 Released 2025-01-21 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.15.0
    • cert-manager operator for Red Hat OpenShift 1.15 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2025:0029 Released 2025-01-09 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.44 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-ibmcloud-machine-controllers-rhel8, openshift4/ose-nutanix-cloud-controller-manager-rhel8
  • RHSA-2024:11562 Released 2025-01-02 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.42 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-ibmcloud-machine-controllers-rhel9
  • RHSA-2024:10823 Released 2024-12-12 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.26 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-ibmcloud-machine-controllers-rhel9, openshift4/ose-monitoring-plugin-rhel9
  • RHSA-2024:10518 Released 2024-12-03 · Red Hat rating Important
    OpenShift Container Platform 4.17.7 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/ose-ibmcloud-machine-controllers-rhel9, openshift4/ose-monitoring-plugin-rhel9, openshift4/ose-networking-console-plugin-rhel9 +1
  • RHSA-2024:9115 Released 2024-11-12 · Red Hat rating Moderate
    grafana security update
    • Red Hat Enterprise Linux AppStream (v. 9) grafana-10.2.6-4.el9, grafana-selinux-10.2.6-4.el9
  • RHSA-2024:9098 Released 2024-11-12 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream (v. 9) skopeo-2:1.16.1-1.el9, skopeo-tests-2:1.16.1-1.el9
  • RHSA-2024:8677 Released 2024-10-30 · Red Hat rating Important
    Errata Advisory for Red Hat OpenShift GitOps v1.12.6 security update
    • Red Hat OpenShift GitOps 1.12 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/argocd-rhel9 +7
  • RHSA-2024:8314 Released 2024-10-23 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.1
    • RHOL 6.0 for RHEL 9 openshift-logging/logging-loki-rhel9
  • RHSA-2024:8040 Released 2024-10-14 · Red Hat rating Moderate
    Cluster Observability Operator 0.4.1
    • COO 0.4 for RHEL 8 cluster-observability-operator/cluster-observability-operator-bundle, cluster-observability-operator/cluster-observability-rhel8-operator, cluster-observability-operator/coo-admission-webhook-rhel8 +10
  • RHSA-2024:7323 Released 2024-10-07 · Red Hat rating Moderate
    Logging for Red Hat OpenShift - 5.6.24
    • RHOL 5.6 for RHEL 8 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel8-operator, openshift-logging/elasticsearch-operator-bundle +15
  • RHSA-2024:7744 Released 2024-10-07 · Red Hat rating Moderate
    Red Hat OpenShift Data Foundation 4.13.12 security, enhancement & bug fix update
    • RHODF 4.13 for RHEL 9 odf4/cephcsi-rhel9
  • RHSA-2024:7624 Released 2024-10-03 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.14.11 security and bug fix update
    • RHODF 4.14 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-core-rhel9
  • RHSA-2024:7184 Released 2024-10-03 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.38 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-apiserver-network-proxy-rhel8, openshift4/ose-hypershift-rhel8 +1
  • RHSA-2024:7324 Released 2024-10-02 · Red Hat rating Moderate
    Logging for Red Hat OpenShift - 5.9.7
    • RHOL 5.9 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/eventrouter-rhel9 +9
  • RHSA-2024:3722 Released 2024-10-01 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.0 packages and security update
    • Red Hat OpenShift Container Platform 4.17 openshift-4.17.0-202409121706.p0.gd3adea4.assembly.stream.el8, openshift-4.17.0-202409121706.p0.gd3adea4.assembly.stream.el9, openshift-clients-4.17.0-202409111134.p0.gbc58b3a.assembly.stream.el8 +21
  • RHSA-2024:7237 Released 2024-09-26 · Red Hat rating Moderate
    Logging for Red Hat OpenShift - 5.8.13
    • RHOL 5.8 for RHEL 9 openshift-logging/cluster-logging-operator-bundle, openshift-logging/cluster-logging-rhel9-operator, openshift-logging/elasticsearch-operator-bundle +14
  • RHSA-2024:6811 Released 2024-09-25 · Red Hat rating Important
    OpenShift Container Platform 4.13.51 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-cluster-openshift-controller-manager-operator, openshift4/ose-hypershift-rhel8, openshift4/ose-openshift-apiserver-rhel8 +1
  • RHSA-2024:6755 Released 2024-09-18 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.16.2 security and bug fix update
    • RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-core-rhel9, odf4/ocs-client-console-rhel9 +7
  • RHSA-2024:6642 Released 2024-09-18 · Red Hat rating Important
    OpenShift Container Platform 4.12.65 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-installer, openshift4/ose-oauth-apiserver-rhel8, rhcos
  • RHSA-2024:6738 Released 2024-09-17 · Red Hat rating Moderate
    Multicluster Engine for Kubernetes 2.5.7 security updates and bug fixes
    • multicluster engine for Kubernetes 2.5 for RHEL 8 multicluster-engine/hive-rhel8
    • multicluster engine for Kubernetes 2.5 for RHEL 9 multicluster-engine/console-mce-rhel9, multicluster-engine/multicluster-engine-console-mce-rhel9
  • RHSA-2024:6406 Released 2024-09-11 · Red Hat rating Important
    OpenShift Container Platform 4.14.36 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2024:6409 Released 2024-09-11 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.31 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-apiserver-network-proxy-rhel9, openshift4/ose-hypershift-rhel9, openshift4/ose-ibm-cloud-controller-manager-rhel9
  • RHSA-2024:6009 Released 2024-09-04 · Red Hat rating Important
    OpenShift Container Platform 4.13.49 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-coredns, openshift4/ose-installer, openshift4/ose-oauth-apiserver-rhel8 +1
  • RHSA-2024:6194 Released 2024-09-03 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-4:4.9.4-10.el9_4, podman-docker-4:4.9.4-10.el9_4, podman-plugins-4:4.9.4-10.el9_4 +2
  • RHSA-2024:6004 Released 2024-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.16.10 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-cluster-baremetal-operator-rhel9, openshift4/ose-csi-driver-manila-rhel9, openshift4/ose-hypershift-rhel9 +2
  • RHSA-2024:6054 Released 2024-08-29 · Red Hat rating Important
    ACS 4.4 enhancement and security update
    • RHACS 4.4 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10
  • RHSA-2024:5808 Released 2024-08-29 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.64 security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2024:5446 Released 2024-08-22 · Red Hat rating Moderate
    OpenShift Container Platform 4.13.48 packages and security update
    • Red Hat OpenShift Container Platform 4.13 cri-o-1.26.5-20.rhaos4.13.git2e90133.el8, cri-o-1.26.5-20.rhaos4.13.git2e90133.el9, openshift-4.13.0-202408092110.p0.ge0953cc.assembly.stream.el8 +16
  • RHSA-2024:5444 Released 2024-08-22 · Red Hat rating Important
    OpenShift Container Platform 4.13.48 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2024:5433 Released 2024-08-22 · Red Hat rating Important
    OpenShift Container Platform 4.14.35 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2024:5634 Released 2024-08-20 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) podman-2:4.4.1-20.el9_2, podman-docker-2:4.4.1-20.el9_2, podman-gvproxy-2:4.4.1-20.el9_2 +3
  • RHSA-2024:5547 Released 2024-08-19 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.16.1 bug fix and security update
    • RHODF 4.16 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-core-rhel9, odf4/mcg-rhel9-operator +2
  • RHSA-2024:5200 Released 2024-08-19 · Red Hat rating Important
    OpenShift Container Platform 4.12.63 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-cloud-credential-operator, openshift4/ose-cluster-image-registry-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8 +4
  • RHSA-2024:5199 Released 2024-08-19 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.63 security and extras update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-sriov-network-webhook
  • RHSA-2024:5160 Released 2024-08-15 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.27 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-installer, openshift4/ose-powervs-block-csi-driver-rhel9
  • RHSA-2024:5107 Released 2024-08-13 · Red Hat rating Important
    OpenShift Container Platform 4.16.7 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-ironic-rhel9, openshift4/ose-powervs-block-csi-driver-rhel9, rhcos
  • RHSA-2024:5258 Released 2024-08-13 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.0-1.module+el8.10.0+22202+761b9a65.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.0-1.module+el8.10.0+22202+761b9a65.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.0-1.module+el8.10.0+22202+761b9a65.s390x::container-tools:rhel8 +47
  • RHSA-2024:5194 Released 2024-08-12 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+22142+4cbed6b3.aarch64::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22142+4cbed6b3.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22142+4cbed6b3.s390x::container-tools:rhel8 +47
  • RHSA-2024:4963 Released 2024-08-07 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.34 security update
    • Red Hat OpenShift Container Platform 4.14 podman-3:4.4.1-16.4.rhaos4.14.el8, podman-3:4.4.1-16.4.rhaos4.14.el9, podman-catatonit-3:4.4.1-16.4.rhaos4.14.el8 +10
  • RHSA-2024:4960 Released 2024-08-07 · Red Hat rating Important
    OpenShift Container Platform 4.14.34 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-ebs-csi-driver-rhel8, openshift4/ose-cloud-credential-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8 +6
  • RHSA-2024:4965 Released 2024-08-06 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.6 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-powervs-cloud-controller-manager-rhel9, openshift4/ose-prometheus-rhel9
  • RHSA-2024:4846 Released 2024-07-31 · Red Hat rating Moderate
    OpenShift Container Platform 4.13.46 security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-cloud-credential-operator, openshift4/ose-cluster-image-registry-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8 +3
  • RHSA-2024:4858 Released 2024-07-31 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.5 packages and security update
    • Red Hat OpenShift Container Platform 4.16 podman-4:4.9.4-8.rhaos4.16.el8, podman-4:4.9.4-9.rhaos4.16.el9, podman-catatonit-4:4.9.4-8.rhaos4.16.el8 +9
  • RHSA-2024:4853 Released 2024-07-31 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.24 packages and security update
    • Red Hat OpenShift Container Platform 4.15 haproxy-2.6.13-4.rhaos4.15.el8, haproxy26-2.6.13-4.rhaos4.15.el8, podman-3:4.4.1-26.2.rhaos4.15.el8 +12
  • RHSA-2024:4872 Released 2024-07-25 · Red Hat rating Moderate
    Release of OpenShift Serverless 1.33.1 security update
    • Red Hat OpenShift Serverless 1.33 openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8, openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8, openshift-serverless-1/client-kn-rhel8 +33
  • RHSA-2024:4699 Released 2024-07-25 · Red Hat rating Important
    OpenShift Container Platform 4.15.23 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-cloud-credential-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8, openshift4/ose-ibm-vpc-block-csi-driver-rhel9 +4
  • RHSA-2024:4613 Released 2024-07-24 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.4 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/egress-router-cni-rhel9, openshift4/network-tools-rhel9, openshift4/ose-agent-installer-api-server-rhel9 +35
  • RHSA-2024:4479 Released 2024-07-17 · Red Hat rating Important
    OpenShift Container Platform 4.14.33 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-azure-disk-csi-driver-rhel8, openshift4/ose-cluster-image-registry-operator, rhcos
  • RHSA-2024:4469 Released 2024-07-16 · Red Hat rating Important
    OpenShift Container Platform 4.16.3 security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-ibm-vpc-block-csi-driver-rhel9, openshift4/ose-ibm-vpc-block-csi-driver-rhel9-operator, rhcos
  • RHSA-2024:4321 Released 2024-07-10 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.21 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-azure-cluster-api-controllers-rhel9, openshift4/ose-cluster-image-registry-rhel9-operator
  • RHSA-2024:4316 Released 2024-07-09 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.2 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-azure-cluster-api-controllers-rhel9, openshift4/ose-cluster-image-registry-rhel9-operator

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
OpenShift API for Data ProtectionAffectedNo fix planned: Will not fix
OpenShift ServerlessAffectedNo fix yet
Red Hat Ceph Storage 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix planned: Will not fix
Red Hat OpenShift AI (RHOAI)AffectedNo fix planned: Will not fix
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Dev SpacesAffectedNo fix planned: Will not fix
Red Hat OpenShift distributed tracing 3AffectedNo fix yet
Red Hat Openshift Container Storage 4AffectedNo fix planned: Out of support scope
Red Hat Openshift Sandboxed ContainersAffectedNo fix yet
COO 0.4 for RHEL 8Fixed RHSA-2024:8040
OpenShift Custom Metrics Autoscaler 2Fixed—
OpenShift Pipelines version 1.16 for RHEL 8Fixed—
RHACS 4.4 for RHEL 8Fixed RHSA-2024:6054
RHODF 4.13 for RHEL 9Fixed RHSA-2024:7744
RHODF 4.14 for RHEL 9Fixed RHSA-2024:7624, RHSA-2025:1866
RHODF 4.15 for RHEL 9Fixed RHSA-2025:1865
RHODF 4.16 for RHEL 9Fixed RHSA-2024:5547, RHSA-2024:6755, RHSA-2025:1829
RHOL 5.6 for RHEL 8Fixed RHSA-2024:7323
RHOL 5.8 for RHEL 9Fixed RHSA-2024:7237
RHOL 5.9 for RHEL 9Fixed RHSA-2024:7324
RHOL 6.0 for RHEL 9Fixed RHSA-2024:8314
Red Hat Ceph Storage 8.1 ToolsFixed RHSA-2025:9776
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:5258
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:6194, RHSA-2024:9098, RHSA-2024:9115
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:5194
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:5634
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2024:5199, RHSA-2024:5200, RHSA-2024:5808, RHSA-2024:6642
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2024:4846, RHSA-2024:5444, RHSA-2024:5446, RHSA-2024:6009, RHSA-2024:6811, RHSA-2025:1116
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2024:4479, RHSA-2024:4960, RHSA-2024:4963, RHSA-2024:5433, RHSA-2024:6406, RHSA-2024:7184, RHSA-2025:0029, RHSA-2025:11669
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2024:11562, RHSA-2024:4321, RHSA-2024:4699, RHSA-2024:4853, RHSA-2024:5160, RHSA-2024:6409
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2024:10823, RHSA-2024:4316, RHSA-2024:4469, RHSA-2024:4613, RHSA-2024:4858, RHSA-2024:4965, RHSA-2024:5107, RHSA-2024:6004
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2024:10518, RHSA-2024:3722
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2024:6122
Red Hat OpenShift GitOps 1.12Fixed RHSA-2024:8677
Red Hat OpenShift Serverless 1.33Fixed RHSA-2024:4872
cert-manager operator for Red Hat OpenShift 1.14Fixed RHSA-2025:3714
cert-manager operator for Red Hat OpenShift 1.15Fixed RHSA-2025:0536
multicluster engine for Kubernetes 2.5 for RHEL 8Fixed RHSA-2024:6738
Not affected: 23 products
  • Ironic content for Red Hat OpenShift Container Platform 4.13
  • Ironic content for Red Hat OpenShift Container Platform 4.17
  • Multicluster Engine for Kubernetes
  • RHODF 4.13 for RHEL 9
  • RHODF 4.14 for RHEL 9
  • RHODF 4.15 for RHEL 9
  • RHODF 4.16 for RHEL 9
  • RHOL 6.0 for RHEL 9
  • Red Hat Enterprise Linux 10
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Data Science (RHODS)
  • Red Hat Openshift Data Foundation 4
  • cert-manager operator for Red Hat OpenShift 1.14
  • multicluster engine for Kubernetes 2.5 for RHEL 8
  • multicluster engine for Kubernetes 2.5 for RHEL 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-6104
  2. 2026-10-03 Alias added: GHSA-v6v8-xj6m-xwqh
  3. 2026-10-13 Affected versions changed · Red Hat

References

Advisory 3

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences