PT-2024-5025 · Unknown+2 · Kubernetes+2

Paulo Gomes · Published 2024-07-17 · Updated 2025-08-08 · CVE-2024-5321

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: Kubernetes versions prior to 1.27.16 Kubernetes versions prior to 1.28.12 Kubernetes versions prior to 1.29.7 Kubernetes versions prior to 1.30.4

Description: A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTINUsers may be able to read container logs and NT AUTHORITYAuthenticated Users may be able to modify container logs. The issue is related to incorrectly used default permissions in the kubelet utility for managing virtual machine clusters in Kubernetes for Windows operating systems. This could allow an attacker to modify information stored in container logs.

Recommendations: For Kubernetes versions prior to 1.27.16, update to version 1.27.16 or later. For Kubernetes versions prior to 1.28.12, update to version 1.28.12 or later. For Kubernetes versions prior to 1.29.7, update to version 1.29.7 or later. For Kubernetes versions prior to 1.30.4, update to version 1.30.4 or later.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

ALT-PU-2024-10197

ALT-PU-2024-10199

ALT-PU-2024-10200

ALT-PU-2024-10201

ALT-PU-2024-10383

ALT-PU-2024-10385

ALT-PU-2024-10525

ALT-PU-2024-10527

BDU:2024-05549

CVE-2024-5321

ECHO-FF7B-4BC1-46E0

GHSA-82M2-CV7P-4M75

GO-2024-2994

OPENSUSE-SU-2025:15424-1

Affected Products

Alt Linux

Kubernetes

Red Os

References · 66

• https://ubuntu.com/security/CVE-2024-5321 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-2994 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-5321 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-5321 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15424-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-5321 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-5321 · Security Note
• https://osv.dev/vulnerability/GHSA-82m2-cv7p-4m75 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05549 · Security Note
• https://github.com/kubernetes/kubernetes · Note
• https://github.com/kubernetes/kubernetes/issues/126161 · Note
• https://github.com/kubernetes/kubernetes/commit/84beb2915fa28ae477fe0676be8ba94ccd2b811a · Note
• https://github.com/kubernetes/kubernetes/commit/de2033033b1d202ecaaa79d41861a075df8b49c1 · Note
• https://github.com/kubernetes/kubernetes/commit/90589b8f63d28bcd3db89749950ebc48ed07c190 · Note
• https://github.com/kubernetes/kubernetes/commit/23660a78ae462a6c8c75ac7ffd9af97550dda1aa · Note