CVE-2020-8567

🗓️ 21 Jan 2021 17:09:21Reported by kubernetesType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 61 Views

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6 allows an attacker to write to arbitrary file paths

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2020-8567	21 Jan 202120:28	–	circl
CNNVD	Kubernetes SIGs Secrets-store-csi-driver path traversal vulnerability	21 Jan 202100:00	–	cnnvd
Cvelist	CVE-2020-8567 Kubernetes Secrets Store CSI Driver plugin directory traversals	21 Jan 202117:09	–	cvelist
EUVD	EUVD-2022-2051	3 Oct 202520:07	–	euvd
Github Security Blog	Kubernetes Secrets Store CSI Driver plugins arbitrary file write	24 May 202217:40	–	github
GitLab Advisory Database	Kubernetes Secrets Store CSI Driver plugins arbitrary file write	24 May 202200:00	–	gitlab
GitLab Advisory Database	Kubernetes Secrets Store CSI Driver plugins arbitrary file write	24 May 202200:00	–	gitlab
NVD	CVE-2020-8567	21 Jan 202117:15	–	nvd
OSV	GHSA-2V35-WJ4R-RCMV Kubernetes Secrets Store CSI Driver plugins arbitrary file write	24 May 202217:40	–	osv
OSV	GO-2024-2750 Kubernetes Secrets Store CSI Driver plugins arbitrary file write in github.com/Azure/secrets-store-csi-driver-provider-azure	5 Jun 202415:10	–	osv

NVD

Node

google secret_manager_provider_for_secret_store_csi_driverRange<0.2.0kubernetes

Node

hashicorp vault_provider_for_secrets_store_csi_driverRange<0.0.6kubernetes

Node

microsoft azure_key_vault_provider_for_secrets_store_csi_driverRange<0.0.10kubernetes

[
  {
    "product": "Kubernetes Secrets Store CSI Driver",
    "vendor": "Kubernetes",
    "versions": [
      {
        "lessThan": "v0.0.6",
        "status": "affected",
        "version": "Vault Plugin",
        "versionType": "custom"
      },
      {
        "lessThan": "v0.0.10",
        "status": "affected",
        "version": "Azure Plugin",
        "versionType": "custom"
      },
      {
        "lessThan": "v0.2.0",
        "status": "affected",
        "version": "GCP Plugin",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384
groups	www.groups.google.com/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHY

21 Nov 2024 05:39Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24

CVSS 3.14.9 - 6.5

EPSS0.00114