CVE-2024-5321

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-276

Affected software

VendorProductVersions
KubernetesKubernetes>= 1.27.0, <= 1.27.15; >= 1.28.0, <= 1.28.11; >= 1.29.0, <= 1.29.6; >= 1.30.0, <= 1.30.2

References

Timeline

Published
Jul 18, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-532105.5In the Linux kernel, the following vulnerability has been resolved: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() PassingCVE-2024-532115.5In the Linux kernel, the following vulnerability has been resolved: net/l2tp: fix warning in l2tp_exit_net found by syzbot In l2tp's net eCVE-2024-532125.5In the Linux kernel, the following vulnerability has been resolved: netlink: fix false positive warning in extack during dumps Commit undeCVE-2024-532137.8In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double free issue with interrupt buffer allocatiCVE-2024-532147.8In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There aCVE-2024-532155.5In the Linux kernel, the following vulnerability has been resolved: svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() ThereCVE-2024-532167.8In the Linux kernel, the following vulnerability has been resolved: nfsd: release svc_expkey/svc_export with rcu_work The last reference fCVE-2024-532175.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in nfsd4_process_cb_update() @ses is inCVE-2024-532187.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix race in concurrent f2fs_stop_gc_thread In my test case, concCVE-2024-532195.5In the Linux kernel, the following vulnerability has been resolved: virtiofs: use pages instead of pointer for kernel direct IO When tryinCVE-2024-53229.1The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authenticatioCVE-2024-532205.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to account dirty data in __get_secs_required() It will trigg
CVE-2024-5321: Medium severity, CVSS 6.1 | Vulnix