Skip to main content
CVE-2024-5321VulnerabilityPublished Updated

Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.16.1 product release

Affects Red HatSource GCVE Database

0

Not known to be exploited.

Data as of 25 Oct 2026, 19:02 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
0.3% chance of exploitation in 30 days – higher than 23% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 22 Aug 2024

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.

What to do

Affected software

ProductAffectedFixed in
Red Hat Product Security Red HatAffected
  • Red Hat
  • Red Hat OpenShift Enterprise
  • Red Hat OpenShift Container Platform 4.15
  • amd64
  • openshift4-wincw/windows-machine-config-operator-bundle@sha256:452a7634363c3f39aacab727c5cf7eef2c5bd95c39b5babb40a70b962f4f97c3_amd64
  • Red Hat OpenShift Container Platform 4.16
  • openshift4-wincw/windows-machine-config-operator-bundle@sha256:c427e5d920b8f5ecd486adf1d010e6723f986d132bf394dbb1d5c9a44ef74225_amd64
Fixed in–

AI-suggested

Red Hat has released an updated product version 7.2.2 of OpenShift for Windows Containers that includes fixes for CVE-2024-5321. Users should upgrade to this version following the Windows Machine Config Operator upgrade documentation provided by Red Hat at https://docs.openshift.com/container-platform/latest/windows_containers/windows-node-upgrades.html. This update addresses the incorrect permissions issue on Windows container logs. No additional mitigation steps are indicated or required beyond applying the official update.

Description

Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers. Security Fix(es): * windows-machine-config-operator-container: Incorrect permissions on Windows containers logs [openshift-4.14.z] (CVE-2024-5321)

References

Community reviews

Loading reviews…