CVE-2024-5321: kubernetes Incorrect Default Permissions
CVSS: 6.1v3.1MediumDeferred
AliasesUBUNTU-CVE-2024-5321CGA-2486-7xv6-c758CGA-24jg-473w-g2h5CGA-29hc-fh94-5vg7CGA-2m8j-8wjp-qgvhCGA-35c8-5jrm-97mvCGA-35hr-3xrm-p784CGA-3cq4-pr53-mqgfCGA-3rj2-9pf5-px5cCGA-445m-5j6x-mv2jCGA-47rv-5vgh-5x8hCGA-4rqr-m3j5-wgqgCGA-5m84-5qwv-w6m8CGA-626j-28qv-43g9CGA-6p79-7x89-c2f4CGA-743v-f7gr-x3wqCGA-74w5-rmj7-87gwCGA-8h3m-979q-6rxxCGA-94hf-wcgx-mphfCGA-955j-r2h4-59xqCGA-9h8c-v2gx-77m5CGA-9hg9-w8jj-f3f2CGA-9r69-7v94-wqmrCGA-9whm-h4w3-484fCGA-c2x5-76gx-9xf5CGA-c58f-hmqp-cfm6CGA-c5cq-96hj-5qwjCGA-cc93-r95m-g3xwCGA-hq44-3xfw-6hpqCGA-j33w-7m37-r7wrCGA-j63r-jg7v-c895CGA-jm9g-46q5-7hmfCGA-jph3-2398-2cxwCGA-mcw4-7gp6-c3pxCGA-mf6f-hg9q-xc93CGA-p7m4-c8pg-36gjCGA-p7x7-2wj2-qgv4CGA-q24p-5x5h-h3r5CGA-q3jw-rvrp-fj84CGA-qrr5-2f8g-9x7gCGA-qv6v-4238-5wgcCGA-r5p9-77f8-787vCGA-r96w-q88p-h593CGA-rwmw-9m4r-c47vCGA-v7mm-q59f-8vwgCGA-vfgq-272g-pc4xCGA-vxqq-8wpg-q6p9CGA-w9w3-g53w-w6rvCGA-wfcm-xx66-g2qcCGA-wwfv-wm65-ffwrCGA-x27q-8g8m-xgvfCGA-x2m4-8mh6-m7gfCGA-x5h4-64wj-5669CGA-x63v-f7jf-w6pgCGA-x7wj-3rpp-pffxCGA-x9ff-g673-538rCGA-xxmc-hmg8-mmvpGHSA-82m2-cv7p-4m75GO-2024-2994CGA-2x3g-jwfh-x74fCGA-48pf-945f-h626CGA-4gqc-wpgm-xrh4CGA-75jp-jchr-p7f7CGA-9hh5-878v-xvhvCGA-9xww-pmv9-9xhfCGA-j8mr-rj58-fvpvCGA-m2c8-fp23-mm3hCGA-mfwr-w69r-fqr6CGA-mqvf-365r-g8mqCGA-mr66-g6g2-59f4CGA-pf8f-gm55-vm4gCGA-q7q3-662h-96vvCGA-qpcp-fjwv-vvwwCGA-v5rg-4p2v-mrjgCGA-vm3w-xhjx-32hvCGA-vp4v-5r8x-ghg2CGA-w46g-fcq6-82p6CGA-wpxm-qgr5-jrxfCGA-xj28-mg5p-6vw3
Published 18-07-2024Last modified 13-09-2024
Vulnerability summary
CVE-2024-5321 is a medium (CVSS 6.1) Incorrect Default Permissions vulnerability in kubernetes. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 22.6% of scored vulnerabilities.
CVSS score
6.1/10
010
Medium · v3.1 (CVE.org)EPSS score
0.31%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 34OPENSUSE-SU-2025:15424-1CGA-26WH-G97J-FH3RCGA-2QX6-XWJ7-G9X8CGA-37JM-96VQ-HP7GCGA-38F9-GG8X-5GM3CGA-497F-Q2V6-V28JCGA-4R3V-PC9W-XG64CGA-58G4-V49F-FMHMCGA-63J7-WXGF-VFR2CGA-87JH-JVP7-GW93CGA-8H29-2HJ7-VFCCCGA-9GXQ-8WC8-WMV4CGA-9V2M-QRGC-W9XFCGA-C82P-6987-X93JCGA-C85C-Q8MQ-6X53CGA-C9RM-62QC-68WJCGA-F9X4-JVJX-9C97CGA-FWJ9-XJ34-66QCCGA-G96J-3797-2HRWCGA-GV2X-G4Q4-JQ86CGA-HFJ8-W2H9-VQ8CCGA-J65G-4R88-6C7WCGA-JGWP-9PJC-C26RCGA-JJP3-5CMX-W4RWCGA-JMHF-J53W-3629CGA-MQ82-CVWF-PG68CGA-Q9V9-XW86-6WXHCGA-RCW4-3W7J-XF23CGA-VJ59-2X2V-4MVJCGA-VPX8-JP2G-VJP5CGA-W23P-X3VF-72HXCGA-W384-5Q23-73M4CGA-X3CF-VWF2-JXQCCGA-XX27-JCPR-CQ92
Timeline
- 18-07-2024PublishedVulnerability first disclosed.
- 13-09-2024Last modifiedVulnerability information updated.
Description
A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.
CVSS metrics
7 scores · 6 sources · 2 versionsHigh 7.1Preferred score · OSV · Go (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:NSourcesSingle source
Medium 6.1Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:NSourcesAll 6 agree
- OSV · UbuntuEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- OSV · WolfiEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- OSV · GoEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- OSV · ChainguardEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- NVDNIST6.1MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
EPSS trend
Probability
0.31%
Chance of exploitation in the next 30 days
Percentile
23%
Versus all other CVEs
30-day change
0.00 pp
From 0.31% on 20-09-2026
20-09-202620-10-2026
EPSS score0.31%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard38 products
- argo-cd-2.11All versions (No fix recorded)
- argocd-image-updater< 0.17.0-r1
- argocd-image-updater-fips< 0.17.0-r2
- aws-ebs-csi-driver< 1.32.0-r3
- aws-efs-csi-driver< 2.1.1-r0
Wolfi28 products
- argocd-image-updater< 0.17.0-r1
- aws-efs-csi-driver< 2.1.1-r0
- cri-tools< 1.30.1-r1
- crictl< 1.30.1-r1
- critest< 1.30.1-r1
K8s.io1 product
- kubernetes< 1.27.16 | ≥ 1.28.0, < 1.28.12 | ≥ 1.29.0, < 1.29.7 | ≥ 1.30.0, < 1.30.3
Kubernetes1 product
- kubernetes≥ 1.27.0, ≤ 1.27.15 | ≥ 1.28.0, ≤ 1.28.11 | ≥ 1.29.0, ≤ 1.29.6 | ≥ 1.30.0, ≤ 1.30.2
Ubuntu1 product
- kubernetesAll versions (No fix recorded)
5 vendors · 69 products
