go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade netavarkUpgrade grafanaUpgrade aardvark-dnsUpgrade libslirp-develUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade podman-remoteUpgrade grafana-selinuxUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade buildahUpgrade toolboxUpgrade buildah-testsUpgrade cockpit-podmanUpgrade criu-develUpgrade libslirpUpgrade python3-criuUpgrade runcUpgrade fuse-overlayfsUpgrade criuUpgrade container-selinuxUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade skopeo-testsUpgrade critUpgrade crunUpgrade conmonUpgrade podman-testsUpgrade slirp4netnsUpgrade podman-pluginsUpgrade udicaUpgrade podmanUpgrade podman-catatonit | Aug 15, 2024 | Jun 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agent | Sep 6, 2024 | Jun 24, 2024 |
| Amazon_linux_2023 | — | Upgrade amazon-cloudwatch-agent | Feb 17, 2025 | Jun 24, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Jun 24, 2024 |
| Oracle_linux | — | Upgrade podman-testsUpgrade python3-criuUpgrade criuUpgrade cockpit-podmanUpgrade buildah-testsUpgrade buildahUpgrade podman-dockerUpgrade critUpgrade crunUpgrade udicaUpgrade podman-gvproxyUpgrade libslirpUpgrade fuse-overlayfsUpgrade runcUpgrade conmonUpgrade podman-catatonitUpgrade slirp4netnsUpgrade python3-podmanUpgrade podmanUpgrade aardvark-dnsUpgrade criu-develUpgrade container-selinuxUpgrade libslirp-develUpgrade netavarkUpgrade skopeoUpgrade skopeo-testsUpgrade podman-pluginsUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade grafanaUpgrade grafana-selinuxUpgrade oci-seccomp-bpf-hookUpgrade podman-remote | Oct 16, 2024 | Jun 24, 2024 |
| Redhat Openshift | — | Upgrade skopeoUpgrade podman | Aug 1, 2024 | Jun 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 13, 2024 | Jun 24, 2024 |
| Rocky_linux | — | Upgrade criu-debuginfoUpgrade libslirpUpgrade containers-commonUpgrade netavarkUpgrade podman-gvproxyUpgrade buildah-testsUpgrade toolboxUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade podman-pluginsUpgrade criu-libsUpgrade podman-testsUpgrade libslirp-develUpgrade conmon-debugsourceUpgrade runc-debuginfoUpgrade buildah-debuginfoUpgrade conmonUpgrade conmon-debuginfoUpgrade skopeo-testsUpgrade criu-develUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade critUpgrade criuUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade buildahUpgrade toolbox-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-debuginfoUpgrade criu-debugsourceUpgrade podmanUpgrade podman-gvproxy-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade runcUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade runc-debugsourceUpgrade podman-remoteUpgrade python3-criuUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeoUpgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade toolbox-debugsourceUpgrade crunUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfo | Aug 22, 2024 | Jun 24, 2024 |
| Suse | — | Upgrade velociraptorUpgrade minikube-bash-completionUpgrade skopeo-fish-completionUpgrade ghUpgrade podmanUpgrade podmanshUpgrade spacecmdUpgrade cosign-bash-completionUpgrade skopeoUpgrade podman-remoteUpgrade gh-fish-completionUpgrade velociraptor-clientUpgrade skopeo-bash-completionUpgrade minikubeUpgrade golang-github-prometheus-prometheusUpgrade docker-machine-driver-kvm2Upgrade cosign-zsh-completionUpgrade skopeo-zsh-completionUpgrade podman-dockerUpgrade rekorUpgrade system-user-velociraptorUpgrade firewalld-prometheus-configUpgrade cosignUpgrade gh-zsh-completionUpgrade gh-bash-completion | Jul 4, 2024 | Jun 24, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub