Security Advisory

CVE-2023-30512

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-04-12 00:00:00

Last updated 2025-02-07 20:12:17

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets, including the admin secret.

← Browse all CVEs View on cve.org ↗