GO-2024-2861 azure-file-csi-driver leaks service account tokens in the logs in sigs.k8s.io/azurefile-csi-driver

🗓️ 04 Jun 2024 15:19:21Reported by GoogleType

osv

osv🔗 osv.dev👁 16 Views

Azure File CSI driver leaks service account tokens in logs

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-3744	13 Feb 202519:11	–	circl
CNNVD	Azure File CSI Driver 安全漏洞	15 May 202400:00	–	cnnvd
CVE	CVE-2024-3744	15 May 202400:42	–	cve
Cvelist	CVE-2024-3744 Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logs	15 May 202400:42	–	cvelist
EUVD	EUVD-2024-1746	3 Oct 202520:07	–	euvd
Github Security Blog	azure-file-csi-driver leaks service account tokens in the logs	15 May 202403:30	–	github
NVD	CVE-2024-3744	15 May 202401:15	–	nvd
OSV	CVE-2024-3744	15 May 202401:15	–	osv
OSV	GHSA-QJQG-4WG7-957H azure-file-csi-driver leaks service account tokens in the logs	15 May 202403:30	–	osv
RedhatCVE	CVE-2024-3744	15 May 202404:27	–	redhatcve

Source	Link
github	www.github.com/advisories/GHSA-qjqg-4wg7-957h
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-3744
openwall	www.openwall.com/lists/oss-security/2024/05/09/4
github	www.github.com/kubernetes-sigs/azurefile-csi-driver/commit/a1b7446de942136419f07394efeef804523f87ae
github	www.github.com/kubernetes-sigs/azurefile-csi-driver/commit/e11ff3dc2c03894cde692213308f9991e7bbd5bf
github	www.github.com/kubernetes/kubernetes/issues/124759
groups	www.groups.google.com/g/kubernetes-security-announce/c/hcgZE2MQo1A/m/Y4C6q-CYAgAJ

03 Mar 2026 04:55Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.00269

SSVC

azure file csi service account tokens logs sigs.k8s.io software