Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS0ydjM1LXdqNHItcmNtds4AAnU5

Kubernetes Secrets Store CSI Driver plugins arbitrary file write

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.

Permalink: https://github.com/advisories/GHSA-2v35-wj4r-rcmv
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0ydjM1LXdqNHItcmNtds4AAnU5
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 2 years ago
Updated: 10 days ago

CVSS Score: 4.9
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L

Identifiers: GHSA-2v35-wj4r-rcmv, CVE-2020-8567
References:

• https://nvd.nist.gov/vuln/detail/CVE-2020-8567
• https://github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384
• https://groups.google.com/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHY
• https://github.com/Azure/secrets-store-csi-driver-provider-azure/pull/298
• https://github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp/pull/74
• https://github.com/hashicorp/secrets-store-csi-driver-provider-vault/pull/50
• https://github.com/advisories/GHSA-2v35-wj4r-rcmv

Repository: https://github.com/kubernetes-sigs/secrets-store-csi-driver
Blast Radius: 3.0

Affected Packages