{"action":"Upgrade k8s.io/kubernetes to 1.27.16 or later.","affected":[{"fixed":"1.27.16","introduced":"0"},{"fixed":"1.28.12","introduced":"1.28.0"},{"fixed":"1.29.7","introduced":"1.29.0"},{"fixed":"1.30.3","introduced":"1.30.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2024-5321"],"ecosystem":"Go","epss":0.00312,"exploited":false,"fixed_versions":["1.27.16","1.28.12","1.29.7","1.30.3"],"ghsa_id":"GHSA-82m2-cv7p-4m75","id":"tcs_01M5KF2XEHGVEMF9D6H8NEKQTY","modified_at":"2026-09-10T03:50:16.346541663Z","published_at":"2024-07-18T21:30:38Z","references":["https://osv.dev/vulnerability/GHSA-82m2-cv7p-4m75","https://nvd.nist.gov/vuln/detail/CVE-2024-5321","https://github.com/kubernetes/kubernetes/issues/126161","https://github.com/kubernetes/kubernetes/commit/23660a78ae462a6c8c75ac7ffd9af97550dda1aa","https://github.com/kubernetes/kubernetes/commit/84beb2915fa28ae477fe0676be8ba94ccd2b811a","https://github.com/kubernetes/kubernetes/commit/90589b8f63d28bcd3db89749950ebc48ed07c190","https://github.com/kubernetes/kubernetes/commit/de2033033b1d202ecaaa79d41861a075df8b49c1","https://github.com/kubernetes/kubernetes","https://groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-82m2-cv7p-4m75","url":"https://osv.dev/vulnerability/GHSA-82m2-cv7p-4m75"}],"summary":"Kubernetes sets incorrect permissions on Windows containers logs"}