Beveiligingsadvies

CVE-2020-8567

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-01-21 17:09:21

Laatst bijgewerkt 2024-09-16 18:23:40

Toegewezen door kubernetes

CVSS-score 4.9

Status PUBLISHED

Beschrijving

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.

← Alle CVE's bekijken Bekijk op cve.org ↗