InfoSecBulletin Cybersecurity for mankind
A new security flaw traced, CVE-2024-9042, poses a serious risk to Kubernetes clusters with Windows worker nodes. It has a Medium rating and a CVSS v3.1 score of 5.9, allowing attackers to execute commands on the host machine through the node’s /logs endpoint.
A vulnerability in the Kubelet component of Kubernetes affects Windows worker nodes. Attackers who can query a node’s /logs endpoint can exploit this flaw to execute commands on the host.
B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum
Cisco Confirms
Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks
AWS Key Hunter
Test this free automated tool to hunt for exposed AWS secrets
Check Point Flaw Used to Deploy ShadowPad and Ransomware
CVE-2024-12284
Citrix Issues Security Update for NetScaler Console
CISA and FBI ALERT
Ghost ransomware to breach organizations in 70 countries
Hacker chains multiple vulns to attack Palo Alto Firewall
150 Gov.t Portal affected
Black-Hat SEO Poisoning Indian “.gov.in, .ac.in” domain
CVE-2018-19410 Exposes 600 PRTG Instances in Bangladesh
Builder claims Rs 150 cr for data loss; AWS faces FIR In Bengaluru
Organizations should evaluate their Kubernetes environments for these conditions:
Component: Kubelet
Affected Versions:
v1.32.0
v1.31.0 to v1.31.4
v1.30.0 to v1.30.8
<=v1.29.12
Clusters with the affected versions on Windows worker nodes are at risk. Upgrade the Kubelet on your Windows worker nodes to the updated patched versions for better system security.
v1.32.1
v1.31.5
v1.30.9
v1.29.13
It is recommended to update promptly to prevent potential exploitation.
System administrators can identify potential exploitation by reviewing cluster audit logs for unusual queries to the /logs endpoint. Focus on entries with unexpected input patterns.
CVE-2024-9042 has a Medium severity rating, but its impact on Kubernetes environments requires prompt mitigation.
Organizations using Kubernetes with Windows worker nodes should quickly apply fixes to avoid exploitation.
