Red Hat Security Advisory

RHSA-2024:5749

Red Hat OpenShift for Windows Containers 10.16.1 product release

Released 2024-08-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.16 openshift4-wincw/windows-machine-config-operator-bundle, openshift4-wincw/windows-machine-config-rhel9-operator, openshift4/windows-machine-config-operator-bundle

Fixes 1 record

TI-2024-04941 CVE-2024-5321 · GHSA-82m2-cv7p-4m75

Incorrect permissions on Windows containers logs

LOW 27

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00312 Published 2024-07-18 Fixed in 1.27.16, 1.28.12 +2 CWE-276