Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2024-5321

Incorrect permissions on Windows containers logs

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
kubernetes

Description

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes Kubernetes

Default version status: affected

  • 1.27.0 to ≤ 1.27.15affected
  • 1.28.0 to ≤ 1.28.11affected
  • 1.29.0 to ≤ 1.29.6affected
  • 1.30.0 to ≤ 1.30.2affected
  • 1.27.16unaffected
  • 1.28.12unaffected
  • 1.29.7unaffected
  • 1.30.3unaffected

References