go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeoUpgrade grafanaUpgrade containers-commonUpgrade libslirp-develUpgrade grafana-selinuxUpgrade criu-libsUpgrade buildahUpgrade containernetworking-pluginsUpgrade netavarkUpgrade podman-remoteUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade runcUpgrade python3-criuUpgrade libslirpUpgrade toolboxUpgrade slirp4netnsUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade podman-testsUpgrade criuUpgrade buildah-testsUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade conmonUpgrade crunUpgrade critUpgrade udicaUpgrade toolbox-testsUpgrade podman-pluginsUpgrade cockpit-podmanUpgrade container-selinuxUpgrade podmanUpgrade criu-develUpgrade podman-catatonit | Aug 15, 2024 | Jun 24, 2024 |
| Amazon Linux Ami 2 | — | Upgrade amazon-cloudwatch-agent | Sep 6, 2024 | Jun 24, 2024 |
| Amazon_linux_2023 | — | Upgrade amazon-cloudwatch-agent | Feb 17, 2025 | Jun 24, 2024 |
| Debian | — | No solution exists | May 15, 2025 | Jun 24, 2024 |
| Oracle_linux | — | Upgrade criu-libsUpgrade container-selinuxUpgrade aardvark-dnsUpgrade skopeoUpgrade libslirp-develUpgrade criu-develUpgrade skopeo-testsUpgrade podman-pluginsUpgrade podmanUpgrade grafanaUpgrade podman-remoteUpgrade grafana-selinuxUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade netavarkUpgrade containers-commonUpgrade crunUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade critUpgrade podman-dockerUpgrade podman-catatonitUpgrade podman-testsUpgrade podman-gvproxyUpgrade udicaUpgrade python3-criuUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade criuUpgrade libslirpUpgrade buildahUpgrade conmonUpgrade runc | Oct 16, 2024 | Jun 24, 2024 |
| Redhat Openshift | — | Upgrade skopeoUpgrade podman | Aug 1, 2024 | Jun 24, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 13, 2024 | Jun 24, 2024 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade podman-testsUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libsUpgrade skopeo-testsUpgrade buildah-debuginfoUpgrade podman-pluginsUpgrade conmonUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade buildah-testsUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade podman-gvproxyUpgrade containers-commonUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade criu-develUpgrade criu-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade aardvark-dnsUpgrade critUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade podman-catatonitUpgrade crunUpgrade podman-remoteUpgrade runcUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildahUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeoUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade criu-debugsourceUpgrade podmanUpgrade fuse-overlayfsUpgrade criuUpgrade podman-debuginfoUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade runc-debugsourceUpgrade containernetworking-pluginsUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-testsUpgrade toolbox-debugsource | Aug 22, 2024 | Jun 24, 2024 |
| Suse | — | Upgrade firewalld-prometheus-configUpgrade skopeo-bash-completionUpgrade velociraptor-clientUpgrade golang-github-prometheus-prometheusUpgrade cosignUpgrade podman-dockerUpgrade system-user-velociraptorUpgrade minikubeUpgrade skopeo-zsh-completionUpgrade cosign-zsh-completionUpgrade rekorUpgrade gh-zsh-completionUpgrade gh-bash-completionUpgrade docker-machine-driver-kvm2Upgrade minikube-bash-completionUpgrade spacecmdUpgrade podmanshUpgrade cosign-bash-completionUpgrade ghUpgrade skopeo-fish-completionUpgrade podmanUpgrade velociraptorUpgrade skopeoUpgrade podman-remoteUpgrade gh-fish-completion | Jul 4, 2024 | Jun 24, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jun 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub