4.9
Moyenne
CVE-2020-8567 Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to…
Description
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Kubernetes Secrets Store CSI Driver 0.2 | premières → < 0.2.0 | 0.2.0 |
| Kubernetes Secrets Store CSI Driver 0.0 | premières → < 0.0.10 | 0.0.6 |