DirectorySecurity Advisories
Sign In
Security Advisories

CGA-2qx6-xwj7-g9x8

Published

Last updated

https://images.chainguard.dev/security/CGA-2qx6-xwj7-g9x8
Package

rancher-webhook-0.4

Latest Update
Fixed
Fixed Version

0.4.9-r1

Aliases
  • CVE-2024-5321
  • GHSA-82m2-cv7p-4m75

Severity

6.1

Medium

CVSS V3

Summary

Kubernetes sets incorrect permissions on Windows containers logs

Description

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

References

Updates

Safe Source for Open Source™
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images

Why Chainguard

Container Image SecurityVulnerability RemediationCompliance and Risk MitigationSoftware Supply Chain SecurityAI/ML Security

Customers

Customer StoriesChainguard Love

Company

About UsOpen SourceCareersNewsroomLegal

Resources

Unchained BlogResearchEventsTrust CenterDocumentation