Vulners
Lucene search
CVE-2020-8568
šļøĀ 21 Jan 2021Ā 17:09:21Reported byĀ kubernetesTypeĀ 
Ā cvešĀ web.nvd.nist.govš°ļøĀ 2Ā Media mentionsšĀ 57Ā Viewsš WEB
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2020-8568 | 21 Jan 202120:28 | ā | circl |
 | Kubernetes SIGs Secrets-store-csi-driver path traversal vulnerability | 21 Jan 202100:00 | ā | cnnvd |
 | CVE-2020-8568 Kubernetes Secrets Store CSI Driver sync/rotate directory traversal | 21 Jan 202117:09 | ā | cvelist |
 | EUVD-2022-0837 | 3 Oct 202520:07 | ā | euvd |
 | Directory traversal in Kubernetes Secrets Store CSI Driver | 15 Feb 202201:57 | ā | github |
 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 15 Feb 202200:00 | ā | gitlab |
| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 15 Feb 202200:00 | ā | gitlab |
 | CVE-2020-8568 | 21 Jan 202117:15 | ā | nvd |
 | GHSA-5CGX-VHFP-6CF9 Directory traversal in Kubernetes Secrets Store CSI Driver | 15 Feb 202201:57 | ā | osv |
| GO-2022-0629 Directory traversal in sigs.k8s.io/secrets-store-csi-driver | 15 Feb 202201:57 | ā | osv |
10
Node
[
{
"product": "Kubernetes Secrets Store CSI Driver",
"vendor": "Kubernetes",
"versions": [
{
"status": "affected",
"version": "Kubernetes Secrets Store CSI Driver v0.0.15"
},
{
"status": "affected",
"version": "Kubernetes Secrets Store CSI Driver v0.0.16"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| SecretProviderClassPodStatus/Status | path | SecretProviderClassPodStatus/Status | Privilege escalation by modifying SecretProviderClassPodStatus/Status to gain write access to the host filesystem and sync contents to Kubernetes Secrets (affecting paths under /var/lib/kubelet/pods). | CWE-20,Ā CWE-24,Ā CWE-22 |
Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Nov 2024 05:39Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.9
CVSS 3.15.8 - 6.5
EPSS0.00449