Vulnerability · Published Jan 21, 2021 · Assigned by kubernetes
CVE-2020-8567Kubernetes Secrets Store CSI Driver plugin directory traversals
Medium 4.9
In plain English
A medium-severity security flaw in Kubernetes Secrets Store CSI Driver from Kubernetes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/Azure/secrets-store-csi-driver-provider-azure | 0.0.10 | GHSA-2v35-wj4r-rcmv |
| Go | github.com/Azure/secrets-store-csi-driver-provider-azure | no fix listed | GO-2024-2750 |
| Go | github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp | 0.2.0 | GHSA-2v35-wj4r-rcmv |
| Go | github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp | 0.2.0 | GO-2024-2750 |
| Go | github.com/hashicorp/vault-csi-provider | 0.0.6 | GHSA-2v35-wj4r-rcmv |
| Go | github.com/hashicorp/vault-csi-provider | no fix listed | GO-2024-2750 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Kubernetes | Kubernetes Secrets Store CSI Driver | Vault Plugin – before v0.0.6Azure Plugin – before v0.0.10GCP Plugin – before v0.2.0 |
Weakness: CWE-24 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L