CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NCVE-2020-8567
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.
Severity
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-22, CWE-24
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:secret_manager_provider_for_secret_store_csi_driver
- hashicorp:vault_provider_for_secrets_store_csi_driver
- microsoft:azure_key_vault_provider_for_secrets_store_csi_driver
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2v35-wj4r-rcmv | Go | github.com/hashicorp/vault-csi-provider | <0.0.6 | 0.0.6 |
| GHSA-2v35-wj4r-rcmv | Go | github.com/Azure/secrets-store-csi-driver-provider-azure | <0.0.10 | 0.0.10 |
| GHSA-2v35-wj4r-rcmv | Go | github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp | <0.2.0 | 0.2.0 |
| GO-2024-2750 | Go | github.com/Azure/secrets-store-csi-driver-provider-azure | all versions | no fix published |
| GO-2024-2750 | Go | github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp | <0.2.0 | 0.2.0 |
| GO-2024-2750 | Go | github.com/hashicorp/vault-csi-provider | all versions | no fix published |