GitHub Advisoryadvisory · Go

GHSA-2v35-wj4r-rcmv Kubernetes Secrets Store CSI Driver plugins arbitrary file write

LOW Published 2022-05-24 Modified 2024-11-18 Official page ↗
Aliases
CVE-2020-8567
Ecosystem
Go
Packages
github.com/hashicorp/vault-csi-provider, github.com/Azure/secrets-store-csi-driver-provider-azure, github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L
Weaknesses
CWE-22
Reviewed
2024-04-24

Affected packages

• Go github.com/hashicorp/vault-csi-provider: < 0.0.6 → fixed in 0.0.6 • Go github.com/Azure/secrets-store-csi-driver-provider-azure: < 0.0.10 → fixed in 0.0.10 • Go github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp: < 0.2.0 → fixed in 0.2.0

Description

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including `/var/lib/kubelet/pods`.

Related

Alias · CVE (1)

  • CVE-2020-8567 Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References