{"action":"Upgrade k8s.io/kubernetes to 1.27.16 or later.","affected":[{"fixed":"1.27.16","introduced":"0"},{"fixed":"1.28.12","introduced":"1.28.0"},{"fixed":"1.29.7","introduced":"1.29.0"},{"fixed":"1.30.3","introduced":"1.30.0"}],"component":"k8s.io/kubernetes","cve_ids":["CVE-2024-5321"],"ecosystem":"Go","epss":0.00312,"exploited":false,"fixed_versions":["1.27.16","1.28.12","1.29.7","1.30.3"],"ghsa_id":"GHSA-82m2-cv7p-4m75","id":"tcs_01M5KG4AB9K4DFYCCSEPQRT0GJ","modified_at":"2026-02-04T02:19:38.436463Z","published_at":"2024-07-22T18:24:38Z","references":["https://osv.dev/vulnerability/GO-2024-2994","https://github.com/advisories/GHSA-82m2-cv7p-4m75","https://github.com/kubernetes/kubernetes/commit/23660a78ae462a6c8c75ac7ffd9af97550dda1aa","https://github.com/kubernetes/kubernetes/commit/84beb2915fa28ae477fe0676be8ba94ccd2b811a","https://github.com/kubernetes/kubernetes/commit/90589b8f63d28bcd3db89749950ebc48ed07c190","https://github.com/kubernetes/kubernetes/commit/de2033033b1d202ecaaa79d41861a075df8b49c1","https://github.com/kubernetes/kubernetes/issues/126161","https://groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GO-2024-2994","url":"https://osv.dev/vulnerability/GO-2024-2994"},{"source":"nvd","source_id":"CVE-2024-5321","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5321"}],"summary":"Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes"}