Kubernetes sets incorrect permissions on Windows containers logs

🗓️ 18 Jul 2024 21:30:38Reported by GitHub Advisory DatabaseType

Kubernetes sets incorrect permissions on Windows containers log

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple vulnerabilities	31 Jul 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Kubernetes kubelet [CVE-2024-5321]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Kubernetes kubelet [CVE-2024-5321]	30 Jan 202521:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	15 Apr 202502:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September and October 2024.	15 Apr 202502:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for August 2024 - Multiple CVEs addressed	10 Sep 202405:21	–	ibm
AlpineLinux	CVE-2024-5321	18 Jul 202419:15	–	alpinelinux
BDU FSTEC	The vulnerability of the kubelet utility in the Kubernetes cluster management software, related to improperly used standard permissions, allows a perpetrator to alter the information stored in container logs.	22 Jul 202400:00	–	bdu_fstec
Chainguard	CVE-2024-5321 vulnerabilities	18 Jul 202419:15	–	cgr

Vulners

Node

k8s.io kubernetesRange1.30.0–1.30.3go

k8s.io kubernetesRange1.29.0–1.29.7go

k8s.io kubernetesRange1.28.0–1.28.12go

k8s.io kubernetesRange<1.27.16go

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-5321
github	www.github.com/kubernetes/kubernetes/issues/126161
groups	www.groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0
github	www.github.com/kubernetes/kubernetes/commit/23660a78ae462a6c8c75ac7ffd9af97550dda1aa
github	www.github.com/kubernetes/kubernetes/commit/84beb2915fa28ae477fe0676be8ba94ccd2b811a
github	www.github.com/kubernetes/kubernetes/commit/90589b8f63d28bcd3db89749950ebc48ed07c190
github	www.github.com/kubernetes/kubernetes/commit/de2033033b1d202ecaaa79d41861a075df8b49c1
github	www.github.com/advisories/GHSA-82m2-cv7p-4m75

18 Nov 2024 16:26Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.1

EPSS0.00312

SSVC

CWE-276