← Back to CVE List

CVE-2020-8567

Published: 2021-01-21T17:15Z
Last Modified: 2024-11-21T05:39Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt