Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.16.1 product release
Affects Red HatSource GCVE Database
Not known to be exploited.
Data as of 25 Oct 2026, 19:02 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 23% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 22 Aug 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Red Hat Product Security Red Hat | Affected
| Fixed in– |
AI-suggested
Red Hat has released an updated product version 7.2.2 of OpenShift for Windows Containers that includes fixes for CVE-2024-5321. Users should upgrade to this version following the Windows Machine Config Operator upgrade documentation provided by Red Hat at https://docs.openshift.com/container-platform/latest/windows_containers/windows-node-upgrades.html. This update addresses the incorrect permissions issue on Windows container logs. No additional mitigation steps are indicated or required beyond applying the official update.
Description
Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers. Security Fix(es): * windows-machine-config-operator-container: Incorrect permissions on Windows containers logs [openshift-4.14.z] (CVE-2024-5321)
References
- access.redhat.com/errata/RHSA-2024:6734 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- issues.redhat.com/browse/WINC-1310 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6734.json (opens in a new tab)
- access.redhat.com/errata/RHSA-2024:5745 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-33875 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-37533 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-38485 (opens in a new tab)
- issues.redhat.com/browse/WINC-1289 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5745.json (opens in a new tab)
- access.redhat.com/errata/RHSA-2024:5749 (opens in a new tab)
- issues.redhat.com/browse/OCPBUGS-37609 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5749.json (opens in a new tab)