CVE-2020-8567GHSA-2V35-WJ4R-RCMVGO-2024-2750
Kubernetes Secrets Store CSI Driver plugin directory traversals
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in v0.0.6, v0.0.10, v0.2.0, 0.0.6, 0.0.10, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.
Timeline
- CVE published
- Record last updated
Affected versions
- Kubernetes Kubernetes Secrets Store CSI Driver
fixed in v0.0.6; fixed in v0.0.10; fixed in v0.2.0
- github.com/hashicorp/vault-csi-providerGo
fixed in 0.0.6
- github.com/Azure/secrets-store-csi-driver-provider-azureGo
fixed in 0.0.10
- github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcpGo
fixed in 0.2.0
- github.com/Azure/secrets-store-csi-driver-provider-azureGo
All versions
- github.com/hashicorp/vault-csi-providerGo
All versions