← Back

Secret Manager Provider For Secret Store Csi Driver

secret_manager_provider_for_secret_store_csi_driver

Vendor: Google • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-8567
3Google
HashicorpMicrosoft
3Azure Key Vault Provider For Secrets Store Csi Driver
Secret Manager Provider For Secret Store Csi DriverVault Provider For Secrets Store Csi Driver
Nov 21, 2024
Jan 21, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to a...Show more
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.Show less