p PatchFirst

CVE-2024-5321

CVE-2024-5321 · Incorrect permissions on Windows containers logs

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

CVSS 6.1 · Medium · EPSS 0.3%

Published
Updated

Stack: containers

Affected products and versions

  • kubernetes

    Versions
    • ≥ 1.27.0, ≤ 1.27.15: Affected (semver)
    • ≥ 1.28.0, ≤ 1.28.11: Affected (semver)
    • ≥ 1.29.0, ≤ 1.29.6: Affected (semver)
    • ≥ 1.30.0, ≤ 1.30.2: Affected (semver)
    • 1.27.16: Not affected
    • 1.28.12: Not affected
    • 1.29.7: Not affected
    • 1.30.3: Not affected

    No fix published

Original sources

Check your server →