CVE-2020-8567 json
Kubernetes Secrets Store CSI Driver plugin directory traversals
published 2021-01-21 5 y ago modified 2026-09-10 1 mo ago also GHSA-2v35-wj4r-rcmv , GO-2024-2750 , EUVD-2022-2051
- cvss
- 4.9
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.5%
- EPSS 1.5% chance of exploitation in 30 days, percentile 74%
- public exploits
- 0
- none known
Summary
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.
Patch / fix
- go github.com/hashicorp/vault-csi-provider 0.0.6
- go github.com/Azure/secrets-store-csi-driver-provider-azure 0.0.10
- go github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp 0.2.0
- Kubernetes Kubernetes Secrets Store CSI Driver v0.0.6, v0.0.10, v0.2.0
- github.com/Azure/secrets-store-csi-driver-provider-azure#298 pull request
- github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp#74 pull request
- github.com/hashicorp/secrets-store-csi-driver-provider-vault#50 pull request
- github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384 advisory
Exploit prediction
1.49% chance of exploitation in the next 30 days, higher than 74% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 4.9 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L |
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:N/I:P/A:N |
| GitHub | 3.1 | 4.9 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| go | github.com/hashicorp/vault-csi-provider | <0.0.6 all versions |
0.0.6 |
| go | github.com/Azure/secrets-store-csi-driver-provider-azure | <0.0.10 all versions |
0.0.10 |
| go | github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp | <0.2.0 |
0.2.0 |
Affected products
- Kubernetes Kubernetes Secrets Store CSI Driver
Classification
References
-
github.com
/kubernetes-sigs/secrets-store-csi-driver/issues/384
web, patch, third-party-advisory
-
github.com
/Azure/secrets-store-csi-driver-provider-azure/pull/298
web, patch
-
github.com
/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp/pull/74
web, patch
-
github.com
/hashicorp/secrets-store-csi-driver-provider-vault/pull/50
web
-
groups.google.com
/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHY
web, mailing-list, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2020-8567
advisory
-
github.com
/advisories/GHSA-2v35-wj4r-rcmv
advisory
Sources
- CVE List CVE-2020-8567
- GitHub Advisory GHSA-2v35-wj4r-rcmv
- NVD CVE-2020-8567
- OSV GO-2024-2750
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.