CVE-2024-5321
published 2024-07-18CVE-2024-5321: A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated…
PriorityP427medium6.1CVSS 3.1
AVLACLPRLUINSUCHILAN
EPSS
0.31%
22.9th percentile
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | kubernetes | — | — |
| k8s.io | kubernetes | >= 0 < 1.27.16 | 1.27.16 |
| k8s.io | kubernetes | >= 1.28.0 < 1.28.12 | 1.28.12 |
| k8s.io | kubernetes | >= 1.29.0 < 1.29.7 | 1.29.7 |
| k8s.io | kubernetes | >= 1.30.0 < 1.30.3 | 1.30.3 |
| kubernetes | kubernetes | 1.27.0 – 1.27.15 | — |
| kubernetes | kubernetes | 1.28.0 – 1.28.11 | — |
| kubernetes | kubernetes | 1.29.0 – 1.29.6 | — |
| kubernetes | kubernetes | 1.30.0 – 1.30.2 | — |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
osv6.1MEDIUM
vendor_debian6.1LOW
vendor_redhat6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kubelet: Incorrect permissions on Windows containers logs
vendor_redhat·2024-07-18·CVSS 6.1
CVE-2024-5321 [MEDIUM] CWE-276 kubelet: Incorrect permissions on Windows containers logs
kubelet: Incorrect permissions on Windows containers logs
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
A flaw was found in Kubernetes clusters with Windows nodes. BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
Debian
CVE-2024-5321: kubernetes - A security issue was discovered in Kubernetes clusters with Windows nodes where ...
vendor_debian·2024·CVSS 6.1
CVE-2024-5321 [MEDIUM] CVE-2024-5321: kubernetes - A security issue was discovered in Kubernetes clusters with Windows nodes where ...
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
OSV
Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
osv·2024-07-22
CVE-2024-5321 Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
OSV
CVE-2024-5321: A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Auth
osv·2024-07-18·CVSS 6.1
CVE-2024-5321 [MEDIUM] CVE-2024-5321: A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Auth
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
OSV
Kubernetes sets incorrect permissions on Windows containers logs
osv·2024-07-18
CVE-2024-5321 [HIGH] Kubernetes sets incorrect permissions on Windows containers logs
Kubernetes sets incorrect permissions on Windows containers logs
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
GHSA
Kubernetes sets incorrect permissions on Windows containers logs
ghsa·2024-07-18
CVE-2024-5321 [HIGH] CWE-276 Kubernetes sets incorrect permissions on Windows containers logs
Kubernetes sets incorrect permissions on Windows containers logs
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/kubernetes/kubernetes/issues/126161https://groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0http://www.openwall.com/lists/oss-security/2024/07/17/3https://github.com/kubernetes/kubernetes/issues/126161https://groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0
2024-07-18
Published