go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade aardvark-dnsUpgrade skopeoUpgrade netavarkUpgrade python3-podmanUpgrade containernetworking-pluginsUpgrade grafana-selinuxUpgrade grafanaUpgrade podman-remoteUpgrade libslirp-develUpgrade containers-commonUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade crunUpgrade critUpgrade skopeo-testsUpgrade conmonUpgrade cockpit-podmanUpgrade podman-pluginsUpgrade python3-criuUpgrade udicaUpgrade slirp4netnsUpgrade toolboxUpgrade criuUpgrade criu-develUpgrade libslirpUpgrade runcUpgrade buildah-testsUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade podmanUpgrade podman-dockerUpgrade container-selinuxUpgrade podman-catatonitUpgrade podman-testsUpgrade fuse-overlayfs | Aug 15, 2024 | Jun 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agent | Sep 6, 2024 | Jun 24, 2024 |
| Amazon_linux_2023 | — | Upgrade amazon-cloudwatch-agent | Feb 17, 2025 | Jun 24, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Jun 24, 2024 |
| Oracle_linux | — | Upgrade grafanaUpgrade grafana-selinuxUpgrade skopeoUpgrade criu-develUpgrade podmanUpgrade podman-pluginsUpgrade skopeo-testsUpgrade containers-commonUpgrade libslirp-develUpgrade aardvark-dnsUpgrade podman-remoteUpgrade container-selinuxUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade slirp4netnsUpgrade libslirpUpgrade podman-dockerUpgrade udicaUpgrade podman-testsUpgrade critUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade crunUpgrade podman-gvproxyUpgrade runcUpgrade conmonUpgrade buildah-testsUpgrade python3-podmanUpgrade buildahUpgrade criuUpgrade python3-criuUpgrade cockpit-podman | Oct 16, 2024 | Jun 24, 2024 |
| Redhat Openshift | — | Upgrade podmanUpgrade skopeo | Aug 1, 2024 | Jun 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 13, 2024 | Jun 24, 2024 |
| Rocky_linux | — | Upgrade critUpgrade buildahUpgrade runc-debugsourceUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade criu-debugsourceUpgrade podman-debugsourceUpgrade buildah-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-debuginfoUpgrade runcUpgrade libslirp-debugsourceUpgrade crunUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade podman-remoteUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade libslirp-debuginfoUpgrade podmanUpgrade podman-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade criuUpgrade fuse-overlayfsUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade podman-catatonit-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade containers-commonUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debuginfoUpgrade podman-testsUpgrade podman-pluginsUpgrade slirp4netnsUpgrade criu-libsUpgrade conmonUpgrade buildah-debuginfoUpgrade netavarkUpgrade crun-debuginfoUpgrade buildah-testsUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade criu-develUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade criu-debuginfo | Aug 22, 2024 | Jun 24, 2024 |
| Suse | — | Upgrade minikube-bash-completionUpgrade podmanUpgrade spacecmdUpgrade skopeo-fish-completionUpgrade podmanshUpgrade gh-fish-completionUpgrade ghUpgrade cosign-bash-completionUpgrade skopeoUpgrade velociraptorUpgrade podman-remoteUpgrade podman-dockerUpgrade minikubeUpgrade cosignUpgrade system-user-velociraptorUpgrade gh-zsh-completionUpgrade gh-bash-completionUpgrade firewalld-prometheus-configUpgrade golang-github-prometheus-prometheusUpgrade skopeo-zsh-completionUpgrade docker-machine-driver-kvm2Upgrade cosign-zsh-completionUpgrade skopeo-bash-completionUpgrade rekorUpgrade velociraptor-client | Jul 4, 2024 | Jun 24, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub