CVE Vulnerabilities

CVE-2024-6104

Insertion of Sensitive Information into Log File

Published: Jun 24, 2024 | Modified: Jun 26, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
6 MODERATE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Ubuntu

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.

Weakness

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

Affected Software

Name Vendor Start Version End Version
Retryablehttp Hashicorp * 0.7.7 (excluding)
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/cluster-observability-operator-bundle:0.4.1-18 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/cluster-observability-rhel8-operator:v0.4.1-4 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-admission-webhook-rhel8:v0.77.1-1 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-console-dashboards-plugin-rhel8:v0.2.0-15 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-console-distributed-tracing-plugin-rhel8:v0.1.0-16 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-console-logging-plugin-rhel8:v6.0.0-20 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-console-troubleshooting-panel-plugin-rhel8:v0.1.0-19 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-korrel8r-rhel8:v0.6.3-15 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-prometheus-alertmanager-rhel8:v0.27.0-4 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-prometheus-config-reloader-rhel8:v0.77.1-1 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-prometheus-rhel8:v2.54.1-1 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-prometheus-rhel8-operator:v0.77.1-1 *
CLUSTER-OBSERVABILITY-OPERATOR-0.4-RHEL-8 RedHat cluster-observability-operator/coo-thanos-rhel8:v0.36.1-1 *
Multicluster engine for Kubernetes 2.5 for RHEL 8 RedHat multicluster-engine/agent-service-rhel8:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 8 RedHat multicluster-engine/assisted-image-service-rhel8:v2.5.7-1 *
Multicluster engine for Kubernetes 2.5 for RHEL 8 RedHat multicluster-engine/assisted-installer-agent-rhel8:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 8 RedHat multicluster-engine/assisted-installer-reporter-rhel8:v2.5.7-1 *
Multicluster engine for Kubernetes 2.5 for RHEL 8 RedHat multicluster-engine/assisted-installer-rhel8:v2.5.7-1 *
Multicluster engine for Kubernetes 2.5 for RHEL 8 RedHat multicluster-engine/hive-rhel8:v2.5.7-1 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/addon-manager-rhel9:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/apiserver-network-proxy-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/aws-encryption-provider-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/backplane-rhel9-operator:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/cluster-api-provider-agent-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/cluster-api-provider-aws-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/cluster-api-provider-azure-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/cluster-api-provider-kubevirt-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/cluster-api-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/clusterclaims-controller-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/cluster-curator-controller-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/cluster-image-set-controller-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/clusterlifecycle-state-metrics-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/cluster-proxy-addon-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/cluster-proxy-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/console-mce-rhel9:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/discovery-rhel9:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/hypershift-addon-rhel9-operator:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/hypershift-cli-rhel9:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/hypershift-rhel9-operator:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/image-based-install-rhel9:v2.5.7-7 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/klusterlet-operator-bundle:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/kube-rbac-proxy-mce-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/managedcluster-import-controller-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/managed-serviceaccount-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/mce-operator-bundle:v2.5.7-6 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/multicloud-manager-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/multicluster-engine-cluster-api-provider-agent-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/multicluster-engine-console-mce-rhel9:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/multicluster-engine-hypershift-addon-rhel9-operator:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/multicluster-engine-managed-serviceaccount-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/must-gather-rhel9:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/placement-rhel9:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/provider-credential-controller-rhel9:v2.5.7-2 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/registration-operator-rhel9:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/registration-rhel9:v2.5.7-3 *
Multicluster engine for Kubernetes 2.5 for RHEL 9 RedHat multicluster-engine/work-rhel9:v2.5.7-3 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-central-db-rhel8:4.4.5-2 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-collector-rhel8:4.4.5-2 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-collector-slim-rhel8:4.4.5-2 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-main-rhel8:4.4.5-4 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-operator-bundle:4.4.5-3 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-rhel8-operator:4.4.5-2 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-roxctl-rhel8:4.4.5-2 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-scanner-db-rhel8:4.4.5-2 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-scanner-db-slim-rhel8:4.4.5-3 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-scanner-rhel8:4.4.5-2 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-scanner-slim-rhel8:4.4.5-2 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-scanner-v4-db-rhel8:4.4.5-3 *
Red Hat Advanced Cluster Security 4.4 RedHat advanced-cluster-security/rhacs-scanner-v4-rhel8:4.4.5-3 *
Red Hat Enterprise Linux 8 RedHat container-tools:rhel8-8100020240808093819.afee755d *
Red Hat Enterprise Linux 8.8 Extended Update Support RedHat container-tools:rhel8-8080020240724065004.0f77c1b7 *
Red Hat Enterprise Linux 9 RedHat podman-4:4.9.4-10.el9_4 *
Red Hat Enterprise Linux 9.2 Extended Update Support RedHat podman-2:4.4.1-20.el9_2 *
Red Hat OpenShift Container Platform 4.12 RedHat openshift4/ose-sriov-network-webhook:v4.12.0-202408091241.p0.g83b800f.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.12 RedHat openshift4/ose-cloud-credential-operator:v4.12.0-202408072203.p0.g6de9c4e.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.12 RedHat openshift4/ose-cluster-image-registry-operator:v4.12.0-202408071159.p0.g77fd1a9.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.12 RedHat openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8:v4.12.0-202408071159.p0.gf2b726d.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.12 RedHat openshift4/ose-ibm-vpc-block-csi-driver-rhel8:v4.12.0-202408071159.p0.g921509f.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.12 RedHat openshift4/ose-azure-cluster-api-controllers-rhel8:v4.12.0-202408220304.p0.ga1b2a37.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.12 RedHat openshift4/ose-installer:v4.12.0-202409040731.p0.g798aeaa.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift4/ose-cloud-credential-operator:v4.13.0-202407192107.p0.g73ecd48.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift4/ose-cluster-image-registry-operator:v4.13.0-202407221409.p0.g19ee668.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8:v4.13.0-202407182339.p0.g4c23f81.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift4/ose-ibm-vpc-block-csi-driver-rhel8:v4.13.0-202407182137.p0.g54aaeff.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift4/ose-ibm-vpc-node-label-updater-rhel8:v4.13.0-202407221109.p0.gb819827.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift4/ose-azure-cluster-api-controllers-rhel8:v4.13.0-202408131940.p0.g3f757a8.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift4/ose-powervs-block-csi-driver-rhel8:v4.13.0-202408131940.p0.g16fa555.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.13 RedHat podman-3:4.4.1-13.rhaos4.13.el9 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift4/ose-installer:v4.13.0-202408280339.p0.g1b2041c.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.13 RedHat openshift4/ose-hypershift-rhel8:v4.13.0-202409142105.p0.g6daddee.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.14 RedHat openshift4/ose-cluster-image-registry-operator:v4.14.0-202407041041.p0.g5e20c16.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.14 RedHat openshift4/ose-cloud-credential-operator:v4.14.0-202407301840.p0.g7a5d12e.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.14 RedHat openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8:v4.14.0-202407120310.p0.g620220e.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.14 RedHat openshift4/ose-ibm-vpc-block-csi-driver-rhel8:v4.14.0-202407161139.p0.gea2bc15.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.14 RedHat openshift4/ose-ibm-vpc-node-label-updater-rhel8:v4.14.0-202407191039.p0.gda6823b.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.14 RedHat podman-3:4.4.1-16.4.rhaos4.14.el8 *
Red Hat OpenShift Container Platform 4.14 RedHat openshift4/ose-azure-cluster-api-controllers-rhel8:v4.14.0-202408081241.p0.g8c2203f.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.14 RedHat openshift4/ose-powervs-block-csi-driver-rhel8:v4.14.0-202408081513.p0.g988f710.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.14 RedHat openshift4/ose-installer:v4.14.0-202409031910.p0.ga8c1414.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.14 RedHat openshift4/ose-hypershift-rhel8:v4.14.0-202409250538.p0.gd8f8831.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.15 RedHat openshift4/ose-cloud-credential-operator:v4.15.0-202407181606.p0.gf8455ca.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.15 RedHat openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8:v4.15.0-202407111437.p0.gdf0f1f6.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.15 RedHat openshift4/ose-ibm-vpc-block-csi-driver-rhel9:v4.15.0-202407151106.p0.g81877ac.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.15 RedHat openshift4/ose-ibm-vpc-node-label-updater-rhel9:v4.15.0-202407160936.p0.g5d72ced.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.15 RedHat podman-3:4.4.1-26.2.rhaos4.15.el9 *
Red Hat OpenShift Container Platform 4.15 RedHat openshift4/ose-installer:v4.15.0-202408060439.p0.g950491f.assembly.stream.el8 *
Red Hat OpenShift Container Platform 4.15 RedHat openshift4/ose-powervs-block-csi-driver-rhel9:v4.15.0-202408060439.p0.g38bee56.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.15 RedHat openshift4/ose-azure-cluster-api-controllers-rhel9:v4.15.0-202407020237.p0.g44832d2.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.15 RedHat openshift4/ose-cluster-image-registry-rhel9-operator:v4.15.0-202407031137.p0.g8740a71.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.15 RedHat openshift4/ose-hypershift-rhel9:v4.15.0-202409041437.p0.gf2684bc.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat podman-4:4.9.4-9.rhaos4.16.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-azure-cluster-api-controllers-rhel9:v4.16.0-202407030803.p0.ga81e3b3.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cluster-image-registry-rhel9-operator:v4.16.0-202407030803.p0.g335c914.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-ibm-vpc-block-csi-driver-rhel9:v4.16.0-202407031636.p0.g32b4c00.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-ibm-vpc-block-csi-driver-rhel9-operator:v4.16.0-202407031636.p0.g34fc9a4.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-cloud-credential-rhel9-operator:v4.16.0-202407142206.p0.gfffc75d.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-installer-rhel9:v4.16.0-202407161505.p0.g41969e2.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-powervs-cloud-controller-manager-rhel9:v4.16.0-202407300708.p0.g20e6dc7.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-prometheus-rhel9:v4.16.0-202407261437.p0.gbc04420.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-powervs-block-csi-driver-rhel9:v4.16.0-202408010610.p0.g26162ba.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.16 RedHat openshift4/ose-hypershift-rhel9:v4.16.0-202408281556.p0.g469fb1e.assembly.stream.el9 *
Red Hat OpenShift Container Platform 4.17 RedHat podman-4:5.2.0-2.rhaos4.17.el9 *
Red Hat OpenShift Container Platform 4.17 RedHat skopeo-2:1.16.0-2.rhaos4.17.el9 *
RHODF-4.13-RHEL-9 RedHat odf4/cephcsi-rhel9:v4.13.12-2 *
RHODF-4.14-RHEL-9 RedHat odf4/cephcsi-rhel9:v4.14.11-2 *
RHODF-4.16-RHEL-9 RedHat odf4/mcg-rhel9-operator:v4.16.1-3 *
RHODF-4.16-RHEL-9 RedHat odf4/odf-cli-rhel9:v4.16.1-3 *
RHODF-4.16-RHEL-9 RedHat odf4/odf-multicluster-rhel9-operator:v4.16.1-1 *
RHODF-4.16-RHEL-9 RedHat odf4/cephcsi-rhel9:v4.16.2-2 *
RHODF-4.16-RHEL-9 RedHat odf4/odf-cli-rhel9:v4.16.2-2 *
RHODF-4.16-RHEL-9 RedHat odf4/rook-ceph-rhel9-operator:v4.16.2-3 *
RHOL-5.6-RHEL-8 RedHat cluster-logging-operator-container-v5.6.24-2 *
RHOL-5.6-RHEL-8 RedHat logging-fluentd-container-v1.14.6-228 *
RHOL-5.6-RHEL-8 RedHat logging-vector-container-v0.21.0-138 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/cluster-logging-operator-bundle:v5.6.24-7 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/elasticsearch6-rhel8:v6.8.1-440 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/elasticsearch-operator-bundle:v5.6.24-9 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/elasticsearch-proxy-rhel8:v1.0.0-515 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/elasticsearch-rhel8-operator:v5.6.24-2 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/eventrouter-rhel8:v0.4.0-300 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/kibana6-rhel8:v6.8.1-460 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/log-file-metric-exporter-rhel8:v1.1.0-281 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/logging-curator5-rhel8:v5.8.1-523 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/logging-loki-rhel8:v3.1.1-11 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/logging-view-plugin-rhel8:v5.6.24-3 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/loki-operator-bundle:v5.6.24-18 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/loki-rhel8-operator:v5.6.24-7 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/lokistack-gateway-rhel8:v0.1.0-652 *
RHOL-5.6-RHEL-8 RedHat openshift-logging/opa-openshift-rhel8:v0.1.0-287 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/cluster-logging-operator-bundle:v5.8.13-15 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/cluster-logging-rhel9-operator:v5.8.13-7 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/elasticsearch6-rhel9:v6.8.1-438 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/elasticsearch-operator-bundle:v5.8.13-13 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/elasticsearch-proxy-rhel9:v1.0.0-513 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/elasticsearch-rhel9-operator:v5.8.13-5 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/eventrouter-rhel9:v0.4.0-296 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/fluentd-rhel9:v5.8.13-3 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/log-file-metric-exporter-rhel9:v1.1.0-277 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/logging-curator5-rhel9:v5.8.1-521 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/logging-loki-rhel9:v3.1.1-7 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/logging-view-plugin-rhel9:v5.8.13-4 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/loki-operator-bundle:v5.8.13-17 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/loki-rhel9-operator:v5.8.13-6 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/lokistack-gateway-rhel9:v0.1.0-649 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/opa-openshift-rhel9:v0.1.0-284 *
RHOL-5.8-RHEL-9 RedHat openshift-logging/vector-rhel9:v0.28.1-76 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/cluster-logging-operator-bundle:v5.9.7-11 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/cluster-logging-rhel9-operator:v5.9.7-6 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/eventrouter-rhel9:v0.4.0-301 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/fluentd-rhel9:v5.9.7-3 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/log-file-metric-exporter-rhel9:v1.1.0-282 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/logging-loki-rhel9:v3.1.1-10 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/logging-view-plugin-rhel9:v5.9.7-5 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/loki-operator-bundle:v5.9.7-16 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/loki-rhel9-operator:v5.9.7-7 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/lokistack-gateway-rhel9:v0.1.0-653 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/opa-openshift-rhel9:v0.1.0-288 *
RHOL-5.9-RHEL-9 RedHat openshift-logging/vector-rhel9:v0.34.1-19 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/client-kn-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-apiserver-receive-adapter-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-controller-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-in-memory-channel-controller-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-in-memory-channel-dispatcher-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-istio-controller-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-controller-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-dispatcher-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-post-install-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-receiver-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-kafka-broker-webhook-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-mtbroker-filter-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-mtbroker-ingress-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-mtchannel-broker-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-mtping-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-storage-version-migration-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/eventing-webhook-rhel8:1.12.0-7 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/func-utils-rhel8:1.33.1-1 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/ingress-rhel8-operator:1.33.1-2 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/knative-rhel8-operator:1.33.1-2 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/kn-cli-artifacts-rhel8:1.12.0-6 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/kourier-control-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/net-istio-controller-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/net-istio-webhook-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serverless-operator-bundle:1.33.1-2 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serverless-rhel8-operator:1.33.1-2 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-activator-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-autoscaler-hpa-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-autoscaler-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-controller-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-queue-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-storage-version-migration-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/serving-webhook-rhel8:1.12.0-5 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1/svls-must-gather-rhel8:1.33.1-1 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1-tech-preview/backstage-plugins-eventmesh-rhel8:1.33.1-1 *
RHOSS-1.33-RHEL-8 RedHat openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8:1.12.0-6 *

Extended Description

While logging all information may be helpful during development stages, it is important that logging levels be set appropriately before a product ships so that sensitive user data and system information are not accidentally exposed to potential attackers. Different log files may be produced and stored for:

Potential Mitigations

References