1. Home
  2. CVE Database
  3. CVE-2020-8568
MEDIUM · 5.8

CVE-2020-8568

Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and...

Vulnerability Description

Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under var/lib/kubelet/pods that contain other Kubernetes Secrets.

CVSS Score

5.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
KubernetesSecrets Store Csi Driver0.0.15

Related Weaknesses (CWE)

CWE-20CWE-22CWE-24

References

FAQ

What is CVE-2020-8568?

CVE-2020-8568 is a vulnerability with a CVSS score of 5.8 (MEDIUM). Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and...

How severe is CVE-2020-8568?

CVE-2020-8568 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8568?

Check the references section above for vendor advisories and patch information. Affected products include: Kubernetes Secrets Store Csi Driver.