CVE-2024-41129 The ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

The ops library is a Python framework for developing and testing Kubernetes and machine charms. The issue here is that ops passes the secret content as one of the args via CLI. This issue may affect any of the charms that are using: Juju =3.0, Juju secrets and not correctly capturing and processi...

The vulnerability of the kubelet utility in the Kubernetes cluster management software, related to improperly used standard permissions, allows a perpetrator to alter the information stored in container logs.

The vulnerability of the kubelet utility, a management tool for clusters of virtual machines in Kubernetes, for Windows operating systems is related to the incorrect use of standard permissions. Exploiting this vulnerability could allow an attacker to modify information stored in container logs...

Photon OS 3.0: Kubernetes PHSA-2019-3.0-0003

An update of the kubernetes package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0003. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Kubernetes PHSA-2019-2.0-0161

An update of the kubernetes package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0161. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Kubernetes PHSA-2019-2.0-0120

An update of the kubernetes package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0120. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Kubernetes PHSA-2021-1.0-0368

An update of the kubernetes package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0368. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Incorrect Default Permissions

k8s.io/kubernetes is vulnerable to Incorrect Default Permissions. The vulnerability is due to improper permissions settings, allowing BUILTIN\Users to read container logs and NT AUTHORITY\Authenticated Users to modify container logs, potentially leading to unauthorized access and manipulation of...

GHSA-82M2-CV7P-4M75 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache-fips, nodetaint, rancher-webhook-fips, ip-masq-agent, cri-tools, aws-efs-csi-driver-fips, kubeflow-pipelines, k8s-device-plugin, local-static-provisioner, kubernetes-dns-node-cache,...

GHSA-82M2-CV7P-4M75 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nodetaint, spark-operator, ip-masq-agent, kubeflow-pipelines, argocd-image-updater, kubernetes-csi-driver-hostpath, local-static-provisioner, kubernetes-dns-node-cache, aws-efs-csi-driver, cri-tools...

GHSA-82M2-CV7P-4M75 Kubernetes sets incorrect permissions on Windows containers logs

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...

Kubernetes sets incorrect permissions on Windows containers logs

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...

CVE-2024-5321

A flaw was found in Kubernetes clusters with Windows nodes. BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...

CVE-2024-5321

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...

CVE-2024-5321

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...

CVE-2024-5321 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, nodetaint, spark-operator, ip-masq-agent, kubeflow-pipelines, argocd-image-updater, kubernetes-csi-driver-hostpath, local-static-provisioner, kubernetes-dns-node-cache, aws-efs-csi-driver, cri-tools...

CVE-2024-5321 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache-fips, nodetaint, rancher-webhook-fips, ip-masq-agent, cri-tools, aws-efs-csi-driver-fips, kubeflow-pipelines, k8s-device-plugin, local-static-provisioner, kubernetes-dns-node-cache,...

UBUNTU-CVE-2024-5321

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...

CVE-2024-5321

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...

CVE-2024-5321 Incorrect permissions on Windows containers logs

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs...

CVE-2024-5321

CVE-2024-5321 (Kubernetes Windows nodes): Affected are Kubernetes clusters with Windows nodes where BUILTIN\Users may read container logs and NT AUTHORITY\Authenticated Users may modify container logs. Root cause per the entry is incorrect/default permissions on Windows container logs (CWE-276). ...