VDB
Sign up
MEDIUM6.1

GHSA-82m2-cv7p-4m75

Kubernetes sets incorrect permissions on Windows containers logs

Quick fix

GHSA-82m2-cv7p-4m75 — k8s.io/kubernetes: upgrade to the fixed version with the command below.

go get k8s.io/kubernetes@v1.27.16

Details

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/k8s.io/kubernetes
Introduced in: 0Fixed in: 1.27.16
Fixgo get k8s.io/kubernetes@v1.27.16
Go/k8s.io/kubernetes
Introduced in: 1.28.0Fixed in: 1.28.12
Fixgo get k8s.io/kubernetes@v1.28.12
Go/k8s.io/kubernetes
Introduced in: 1.29.0Fixed in: 1.29.7
Fixgo get k8s.io/kubernetes@v1.29.7
Go/k8s.io/kubernetes
Introduced in: 1.30.0Fixed in: 1.30.3
Fixgo get k8s.io/kubernetes@v1.30.3

References