← Back

Secrets Store Csi Driver

secrets_store_csi_driver

Vendor: Kubernetes • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-2878
1Kubernetes
1Secrets Store Csi Driver
Jun 17, 2026
Jun 7, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs.
CVE-2020-8568
1Kubernetes
1Secrets Store Csi Driver
Jun 17, 2026
Jan 21, 2021
N/A· v4
6.5 MEDIUM· v3
4.9 MEDIUM· v2
Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents...Show more
Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under var/lib/kubelet/pods that contain other Kubernetes Secrets.Show less