CVE-2024-5321
Incorrect permissions on Windows containers logs
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Incorrect permissions on Windows containers logs
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
- Record
CVE-2024-5321- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N - Weakness
- CWE-276
- Updated
- 2026-11-02
EUVDEUVD-2024-2290
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
- Record
EUVD-2024-2290- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-82m2-cv7p-4m75
Kubernetes sets incorrect permissions on Windows containers logs
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
- Record
GHSA-82m2-cv7p-4m75- CVSS 4.0
- 7.1 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N - Weakness
- CWE-276
- Updated
- 2026-11-02
NVD
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
- Record
CVE-2024-5321- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N - Weakness
- CWE-276
- Updated
- 2026-11-02
OSV
Incorrect permissions on Windows containers logs
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
- Record
CVE-2024-5321- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N - Weakness
- CWE-276
- Updated
- 2026-11-02
OSVGHSA-82m2-cv7p-4m75
Kubernetes sets incorrect permissions on Windows containers logs
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
- Record
GHSA-82m2-cv7p-4m75- CVSS 4.0
- 7.1 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N - Weakness
- CWE-276
- Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2024-5321
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
- Record
UBUNTU-CVE-2024-5321- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N - Updated
- 2026-11-02
OSVAZL-45436 No score
CVE-2024-5321 affecting package kubernetes 1.30.10-32
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
- Record
AZL-45436- Updated
- 2026-11-05
OSVGO-2024-2994 No score
Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
- Record
GO-2024-2994- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15424-1 No score
govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250807T150727-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15424-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
k8s.io/kubernetesGo |
before 1.27.16 | 1.27.16 |
k8s.io/kubernetesGo |
1.28.0 up to 1.28.12 | 1.28.12 |
k8s.io/kubernetesGo |
1.29.0 up to 1.29.7 | 1.29.7 |
k8s.io/kubernetesGo |
1.30.0 up to 1.30.3 | 1.30.3 |
kubernetesAzure Linux:3 |
through 1.30.10-32 | None known |
k8s.io/kubernetesGo |
before 1.27.16, 1.28.0 up to 1.28.12, 1.29.0 up to 1.29.7, 1.30.0 up to 1.30.3 | 1.27.161.28.121.29.71.30.3 |
govulncheck-vulndbopenSUSE:Tumbleweed From an advisory covering 44 CVEs |
before 0.0.20250807T150727-1.1 | 0.0.20250807T150727-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| affected | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-5321 is a medium vulnerability (CVSS 6.1) in Kubernetes, published July 18, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in k8s.io/kubernetes 1.27.16.
References
github.com/kubernetes/kubernetes/issues/126161
groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0
openwall.com/lists/oss-security/2024/07/17/3
nvd.nist.gov/vuln/detail/CVE-2024-5321
Show 51 moreShow less
ubuntu.com/security/CVE-2024-5321
cve.org/CVERecord?id=CVE-2024-5321
suse.com/security/cve/CVE-2015-7561