← Back to CVE List

CVE-2020-8568

Published: 2021-01-21T17:15Z
Last Modified: 2024-11-21T05:39Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under var/lib/kubelet/pods that contain other Kubernetes Secrets. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt