Wiz
Vulnerability DatabaseCVE-2024-21400

CVE-2024-21400: 
AKS Node Linux vulnerability analysis and mitigation

Overview

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability (CVE-2024-21400) was disclosed on March 12, 2024. This vulnerability affects Azure Kubernetes Service Confidential Containers (AKSCC), which provides features for securing standard container workloads when handling sensitive data such as PII (Rapid7 Blog).

Technical details

The vulnerability has been assigned a Critical CVSS v3.1 base score of 9.0 with the following vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H. The vulnerability allows an unauthenticated attacker to take over confidential guests and containers (NVD).

Impact

Successful exploitation of this vulnerability could lead to credential theft and affect resources beyond the security scope managed by the Azure Kubernetes Service Confidential Containers. The attack could result in a total compromise of confidential guests and containers (Rapid7 Blog).

Mitigation and workarounds

Remediation requires upgrading to the latest version of the az confcom Azure CLI confidential computing extension and Kata Image. Additional steps beyond merely patching AKSCC are required for complete remediation (Rapid7 Blog).

Community reactions

The vulnerability was discovered and reported by security researcher Yuval Avrahami (Bleeping Computer).

Additional resources

Source: This report was generated using AI

Related AKS Node Linux vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2023-29332CRITICAL9.8
  • AKS Node Linux logoAKS Node Linux
    		NoNoSep 12, 2023
    CVE-2024-29990CRITICAL9
    • AKS Node Linux logoAKS Node Linux
      		NoNoApr 09, 2024
      CVE-2024-21400CRITICAL9
      • AKS Node Linux logoAKS Node Linux
        		NoNoMar 12, 2024
        CVE-2023-5528HIGH8.8
        • NixOS logoNixOS
        • aws-efs-csi-driver
        		NoYesNov 14, 2023
        CVE-2022-3172HIGH8.2
        • Jenkins logoJenkins
        • openshift-kuryr-cni
        		NoYesNov 03, 2023

        Free Vulnerability Assessment

        Benchmark your Cloud Security Posture

        Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

        Request assessment

        Additional Wiz resources

        Cloud Vulnerability DB

        Cloud Vulnerability DB

        A community-led vulnerabilities database

        Cloud Threat Landscape

        Cloud Threat Landscape

        A threat intelligence database

        PEACH

        PEACH

        A tenant isolation framework

        Get a personalized demo

        Ready to see Wiz in action?

        "Best User Experience I have ever seen, provides full visibility to cloud workloads."
        David EstlickCISO
        "Wiz provides a single pane of glass to see what is going on in our cloud environments."
        Adam FletcherChief Security Officer
        "We know that if Wiz identifies something as critical, it actually is."
        Greg PoniatowskiHead of Threat and Vulnerability Management
        Get a demo