CVE-2020-8567: Kubernetes Secrets Store CSI Driver plugin directory traversals
First published: Thu Jan 21 2021(Updated: )
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.
Credit: jordan@liggitt.net jordan@liggitt.net
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Secret Manager Provider For Secret Store Csi Driver | <0.2.0 | |
| Hashicorp Vault Provider For Secrets Store Csi Driver | <0.0.6 | |
| Microsoft Azure Key Vault Provider For Secrets Store Csi Driver | <0.0.10 | |
| go/github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp | <0.2.0 | 0.2.0 |
| go/github.com/Azure/secrets-store-csi-driver-provider-azure | <0.0.10 | 0.0.10 |
| go/github.com/hashicorp/vault-csi-provider | <0.0.6 | 0.0.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384
- https://groups.google.com/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHY
- https://nvd.nist.gov/vuln/detail/CVE-2020-8567
- https://github.com/Azure/secrets-store-csi-driver-provider-azure/pull/298
- https://github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp/pull/74
- https://github.com/hashicorp/secrets-store-csi-driver-provider-vault/pull/50
- https://github.com/advisories/GHSA-2v35-wj4r-rcmv (Advisory)
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/remedy
- agent/severity
- agent/type
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/description
- agent/title
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-2v35-wj4r-rcmv
- alias/CVE-2020-8567
- collector/github-advisory
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/trending
- agent/tags
- agent/source
- vendor/google
- canonical/google secret manager provider for secret store csi driver
- vendor/hashicorp
- canonical/hashicorp vault provider for secrets store csi driver
- vendor/microsoft
- canonical/microsoft azure key vault provider for secrets store csi driver
- package-manager/go