Kubernetes Secrets Store CSI Driver plugins arbitrary file write
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including `/var/lib/kubelet/pods`.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-8567US | medium6.5 | — | ||
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted S… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/Azure/secrets-store-csi-driver-provider-azure/pull/298WEB
- https://github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp/pull/74WEB
- https://github.com/hashicorp/secrets-store-csi-driver-provider-vault/pull/50WEB
- https://github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384WEB
- https://groups.google.com/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHYWEB
- https://nvd.nist.gov/vuln/detail/CVE-2020-8567ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan