~ / search / GHSA-82m2-cv7p-4m75

GHSA-82m2-cv7p-4m75

Kubernetes sets incorrect permissions on Windows containers logs

Source: GitHub Advisory Database (reviewed) High CVE-2024-5321

Packages

EcosystemPackageAffectedFixed in
Go k8s.io/kubernetes < 1.27.16 1.27.16
Go k8s.io/kubernetes >= 1.28.0, < 1.28.12 1.28.12
Go k8s.io/kubernetes >= 1.29.0, < 1.29.7 1.29.7
Go k8s.io/kubernetes >= 1.30.0, < 1.30.3 1.30.3

Details

As written in the advisory (Markdown source, shown as plain text).

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

References

External links from the advisory. They lead to third-party sites.