Red Hat Security Advisory

RHSA-2024:6734

Red Hat OpenShift for Windows Containers 7.2.2 product release [security update]

Released 2024-09-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.12 openshift4-wincw/windows-machine-config-operator-bundle, openshift4-wincw/windows-machine-config-rhel8-operator

Fixes 1 record

TI-2024-04941 CVE-2024-5321 · GHSA-82m2-cv7p-4m75

Incorrect permissions on Windows containers logs

LOW 27

A security issue was discovered in Kubernetes clusters with Windows nodes where BUILTIN\Users may be able to read container logs and NT AUTHORITY\Authenticated Users may be able to modify container logs.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00312 Published 2024-07-18 Fixed in 1.27.16, 1.28.12 +2 CWE-276