GHSA-82m2-cv7p-4m75

Source

https://github.com/advisories/GHSA-82m2-cv7p-4m75

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/07/GHSA-82m2-cv7p-4m75/GHSA-82m2-cv7p-4m75.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-82m2-cv7p-4m75

Aliases

CVE-2024-5321
GO-2024-2994

Downstream

MINI-32w9-2p3x-xq77

Related

Published

2024-07-18T21:30:38Z

Modified

2024-11-18T16:26:53Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Kubernetes sets incorrect permissions on Windows containers logs

Details

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

Database specific

{
    "nvd_published_at": "2024-07-18T19:15:12Z",
    "severity": "HIGH",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-276"
    ],
    "github_reviewed_at": "2024-07-18T21:58:12Z"
}

References