Incorrect permissions on Windows containers logs

🗓️ 17 Jul 2024 13:06:48Reported by Kubernetes Security Response CommitteeType

Windows nodes in Kubernetes could let Users read and Authenticated Users modify container logs; patch fixes.

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple vulnerabilities	31 Jul 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Kubernetes kubelet [CVE-2024-5321]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Kubernetes kubelet [CVE-2024-5321]	30 Jan 202521:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	15 Apr 202502:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September and October 2024.	15 Apr 202502:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for August 2024 - Multiple CVEs addressed	10 Sep 202405:21	–	ibm
AlpineLinux	CVE-2024-5321	18 Jul 202419:15	–	alpinelinux
BDU FSTEC	The vulnerability of the kubelet utility in the Kubernetes cluster management software, related to improperly used standard permissions, allows a perpetrator to alter the information stored in container logs.	22 Jul 202400:00	–	bdu_fstec
Chainguard	CVE-2024-5321 vulnerabilities	18 Jul 202419:15	–	cgr