CVE-2024-5321

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-5321
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-5321.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-5321
Aliases
Downstream
Related
Published
2024-07-18T18:15:25.270Z
Modified
2026-08-12T03:51:48.869737485Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
Summary
Incorrect permissions on Windows containers logs
Details

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

Database specific 
{
    "cwe_ids": [
        "CWE-276"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/5xxx/CVE-2024-5321.json",
    "cna_assigner": "kubernetes"
}
References

Affected packages

Git / github.com/kubernetes/kubernetes

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Introduced
1b4df30b3cdfeaba6024e81e559a6cd09a089d65
Last affected
fb63712e1d017142977e88a23644b8e48b775665
Introduced
855e7c48de7388eb330da0f8d9d2394ee818fb8d
Last affected
f25b321b9ae42cb1bfaa00b3eec9a12566a15d91
Introduced
3f7a50f38688eb332e2a1b013678c6435d539ae6
Last affected
062798d53d83265b9e05f14d85198f74362adaca
Introduced
7c48c2bd72b9bf5c44d21d7338cc7bea77d0ad2a
Last affected
39683505b630ff2121012f3c5b16215a1449d5ed
Database specific
Show details 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "1.27.0"
        },
        {
            "last_affected": "1.27.15"
        },
        {
            "introduced": "1.28.0"
        },
        {
            "last_affected": "1.28.11"
        },
        {
            "introduced": "1.29.0"
        },
        {
            "last_affected": "1.29.6"
        },
        {
            "introduced": "1.30.0"
        },
        {
            "last_affected": "1.30.2"
        }
    ]
}

Affected versions

v1.*
v1.27.0
v1.27.1
v1.27.10
v1.27.11
v1.27.12
v1.27.13
v1.27.14
v1.27.15
v1.27.2
v1.27.3
v1.27.4
v1.27.5
v1.27.6
v1.27.7
v1.27.8
v1.27.9
v1.28.0
v1.28.1
v1.28.10
v1.28.11
v1.28.2
v1.28.3
v1.28.4
v1.28.5
v1.28.6
v1.28.7
v1.28.8
v1.28.9
v1.29.0
v1.29.1
v1.29.2
v1.29.3
v1.29.4
v1.29.5
v1.29.6
v1.30.0
v1.30.1
v1.30.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-5321.json"