CVE-2020-8568

2021-01-2117:15:14

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.5%

JSON

Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under var/lib/kubelet/pods that contain other Kubernetes Secrets.

CPENameOperatorVersion
secrets-store-csi-drivereq0.0.12
secrets-store-csi-drivereq0.0.1
secrets-store-csi-drivereq0.0.13
secrets-store-csi-drivereq0.0.9
secrets-store-csi-drivereq0.0.3
secrets-store-csi-drivereq0.0.10
secrets-store-csi-drivereq0.0.11
secrets-store-csi-drivereq0.0.8
secrets-store-csi-drivereq0.0.16
secrets-store-csi-drivereq0.0.5

Name	Operator	Version
secrets-store-csi-driver	eq	0.0.12
secrets-store-csi-driver	eq	0.0.1
secrets-store-csi-driver	eq	0.0.13
secrets-store-csi-driver	eq	0.0.9
secrets-store-csi-driver	eq	0.0.3
secrets-store-csi-driver	eq	0.0.10
secrets-store-csi-driver	eq	0.0.11
secrets-store-csi-driver	eq	0.0.8
secrets-store-csi-driver	eq	0.0.16
secrets-store-csi-driver	eq	0.0.5