{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-9042", "assignerOrgId": "a6081bf6-c852-4425-ad4f-a67919267565", "state": "PUBLISHED", "assignerShortName": "kubernetes", "dateReserved": "2024-09-20T10:02:50.891Z", "datePublished": "2025-03-13T16:40:13.895Z", "dateUpdated": "2025-03-13T19:24:39.825Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Kubelet", "vendor": "Kubernetes", "versions": [{"status": "affected", "version": "<=v1.29.12"}, {"lessThanOrEqual": "v1.30.8", "status": "affected", "version": "v1.30", "versionType": "semver"}, {"lessThanOrEqual": "v1.31.4", "status": "affected", "version": "v1.31", "versionType": "semver"}, {"lessThanOrEqual": "v1.32.0", "status": "affected", "version": "v1.32", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Peled, Tomer"}, {"lang": "en", "type": "finder", "value": "Aravindh Puthiyaprambil"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p><span style=\"background-color: transparent;\">This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.</span></p>"}], "value": "This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below."}], "impacts": [{"descriptions": [{"lang": "en", "value": "A security vulnerability has been discovered in Kubernetes windows nodes that could allow a user with the ability to query a node's '/logs' endpoint to execute arbitrary commands on the host."}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "a6081bf6-c852-4425-ad4f-a67919267565", "shortName": "kubernetes", "dateUpdated": "2025-03-13T16:40:24.818Z"}, "references": [{"url": "https://github.com/kubernetes/kubernetes/issues/129654"}, {"url": "https://groups.google.com/g/kubernetes-security-announce/c/9C3vn6aCSVg"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2025/01/16/1"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-03-13T17:02:40.910Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-13T19:24:29.055805Z", "id": "CVE-2024-9042", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-13T19:24:39.825Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2025/01/16/1"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-03-13T17:02:40.910Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-9042", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-13T19:24:29.055805Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-13T19:24:35.929Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Peled, Tomer"}, {"lang": "en", "type": "finder", "value": "Aravindh Puthiyaprambil"}], "impacts": [{"descriptions": [{"lang": "en", "value": "A security vulnerability has been discovered in Kubernetes windows nodes that could allow a user with the ability to query a node's '/logs' endpoint to execute arbitrary commands on the host."}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Kubernetes", "product": "Kubelet", "versions": [{"status": "affected", "version": "<=v1.29.12"}, {"status": "affected", "version": "v1.30", "versionType": "semver", "lessThanOrEqual": "v1.30.8"}, {"status": "affected", "version": "v1.31", "versionType": "semver", "lessThanOrEqual": "v1.31.4"}, {"status": "affected", "version": "v1.32", "versionType": "semver", "lessThanOrEqual": "v1.32.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/kubernetes/kubernetes/issues/129654"}, {"url": "https://groups.google.com/g/kubernetes-security-announce/c/9C3vn6aCSVg"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.", "supportingMedia": [{"type": "text/html", "value": "<p><span style=\"background-color: transparent;\">This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.</span></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "a6081bf6-c852-4425-ad4f-a67919267565", "shortName": "kubernetes", "dateUpdated": "2025-03-13T16:40:24.818Z"}}}, "cveMetadata": {"cveId": "CVE-2024-9042", "state": "PUBLISHED", "dateUpdated": "2025-03-13T19:24:39.825Z", "dateReserved": "2024-09-20T10:02:50.891Z", "assignerOrgId": "a6081bf6-c852-4425-ad4f-a67919267565", "datePublished": "2025-03-13T16:40:13.895Z", "assignerShortName": "kubernetes"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below."}], "id": "CVE-2024-9042", "lastModified": "2025-03-13T17:15:34.277", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 0.7, "impactScore": 5.2, "source": "jordan@liggitt.net", "type": "Secondary"}]}, "published": "2025-03-13T17:15:34.277", "references": [{"source": "jordan@liggitt.net", "url": "https://github.com/kubernetes/kubernetes/issues/129654"}, {"source": "jordan@liggitt.net", "url": "https://groups.google.com/g/kubernetes-security-announce/c/9C3vn6aCSVg"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2025/01/16/1"}], "sourceIdentifier": "jordan@liggitt.net", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "jordan@liggitt.net", "type": "Secondary"}]}

{"acknowledgement": "Red Hat would like to thank Aravindh Puthiyaprambil and Peled Tomer for reporting this issue.", "affected_release": [{"advisory": "RHSA-2025:9136", "cpe": "cpe:/a:redhat:windows_machine_config:10.16::el9", "package": "registry.redhat.io/openshift4-wincw/windows-machine-config-rhel9-operator:sha256:c9a6166158e1ccb1764007d79c6e0f879505c3546eb45cbbe79ebeefcc78a728", "product_name": "OpenShift Windows Machine Config Operator 10.16", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:8704", "cpe": "cpe:/a:redhat:windows_machine_config:10.17::el9", "package": "registry.redhat.io/openshift4-wincw/windows-machine-config-rhel9-operator:sha256:ba892f84e923e83a32d5f66dd6f61ff5a6b51cdeba1ef3ae2b250d822b1b0482", "product_name": "OpenShift Windows Machine Config Operator 10.17", "release_date": "2025-06-09T00:00:00Z"}], "bugzilla": {"description": "kubelet: Command Injection affecting Windows nodes via nodes/*/logs/query API", "id": "2337297", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2337297"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "status": "verified"}, "cwe": "CWE-78", "details": ["This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.", "A flaw was found in Kubernetes Windows nodes. This vulnerability allows a user with the ability to query a node's '/logs' endpoint to execute arbitrary commands on the host."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2024-9042", "package_state": [{"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2025-01-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-9042\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-9042"], "statement": "This CVE affects only Windows worker nodes. To detect whether this vulnerability has been exploited, you can examine your cluster's audit logs to search for node 'logs' queries with suspicious inputs.", "threat_severity": "Moderate"}