Aller au contenu
Se connecter
5.8 Moyenne

CVE-2020-8568 Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a…

Description

Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under var/lib/kubelet/pods that contain other Kubernetes Secrets.

Produits et versions touchés

Produit Versions touchées Corrigé en
Kubernetes Secrets Store CSI Driver Versions non publiées

Autres CVE de Kubernetes Secrets Store CSI Driver

Les 2 CVE de Kubernetes Secrets Store CSI Driver →
CVE-2020-8567 Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to… 4.9 Moyenne
Suivre cette CVE