Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-5321

Good to know:

icon

Date: July 18, 2024

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

Language: Go

Severity Score

Related Resources (10)

https://groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0
https://github.com/kubernetes/kubernetes
https://github.com/kubernetes/kubernetes/commit/23660a78ae462a6c8c75ac7ffd9af97550dda1aa
https://github.com/kubernetes/kubernetes/commit/de2033033b1d202ecaaa79d41861a075df8b49c1
https://github.com/kubernetes/kubernetes/commit/84beb2915fa28ae477fe0676be8ba94ccd2b811a
https://nvd.nist.gov/vuln/detail/CVE-2024-5321
https://github.com/kubernetes/kubernetes/issues/126161
https://github.com/kubernetes/kubernetes/commit/90589b8f63d28bcd3db89749950ebc48ed07c190
https://github.com/advisories/GHSA-82m2-cv7p-4m75
https://www.mend.io/vulnerability-database/CVE-2024-5321

Severity Score

Weakness Type (CWE)

Incorrect Default Permissions

CWE-276

Top Fix

icon

Upgrade Version

Upgrade to version k8s.io/kubernetes - v1.27.16;k8s.io/kubernetes - v1.28.12;k8s.io/kubernetes - v1.29.7;k8s.io/kubernetes - v1.30.3

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us