CVE-2024-5321

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-5321

CGA ID

CGA-2qx6-xwj7-g9x8

Severity

Unknown

Summary

Kubernetes sets incorrect permissions on Windows containers logs

Description

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

References

https://images.chainguard.dev/security/CGA-2qx6-xwj7-g9x8
https://github.com/advisories/GHSA-82m2-cv7p-4m75
https://nvd.nist.gov/vuln/detail/CVE-2024-5321
https://github.com/kubernetes/kubernetes/issues/126161
https://github.com/kubernetes/kubernetes/commit/23660a78ae462a6c8c75ac7ffd9af97550dda1aa
https://github.com/kubernetes/kubernetes/commit/84beb2915fa28ae477fe0676be8ba94ccd2b811a
https://github.com/kubernetes/kubernetes/commit/90589b8f63d28bcd3db89749950ebc48ed07c190
https://github.com/kubernetes/kubernetes/commit/de2033033b1d202ecaaa79d41861a075df8b49c1
https://github.com/kubernetes/kubernetes
https://groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2024-5321

Severity

Summary

Description

References

Affected packages

Products

Why Chainguard

Customers

Company

Resources