Detections
Analytics

CVE-2024-5321

high

Description

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

References

https://groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0

https://github.com/kubernetes/kubernetes/issues/126161

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-2290

http://www.openwall.com/lists/oss-security/2024/07/17/3

Details

Source: Mitre, NVD

Published: 2024-07-18

Updated: 2026-04-15

Named Vulnerability: GO-2024-2994Named Vulnerability: GHSA-82m2-cv7p-4m75

Risk Information

CVSS v2

Base Score: 5.2

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Severity: Medium

CVSS v4

Base Score: 7.1

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Severity: High

EPSS

EPSS: 0.00312