CVE-2020-8567

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-24 CWE-22

Affected software

Vendor	Product	Versions
Kubernetes	Kubernetes Secrets Store CSI Driver	>= Vault Plugin, < v0.0.6; >= Azure Plugin, < v0.0.10; >= GCP Plugin, < v0.2.0

References

https://github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384Patch, Third Party Advisory
https://groups.google.com/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHYMailing List, Third Party Advisory
https://github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384Patch, Third Party Advisory
https://groups.google.com/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHYMailing List, Third Party Advisory

Timeline

Published: Jan 21, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-85686.5Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status reso CVE-2020-85696.5Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The Volum CVE-2020-85709.1Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when c CVE-2020-85717.5StorageGRID (formerly StorageGRID Webscale) versions 10.0.0 through 11.3 prior to 11.2.0.8 and 11.3.0.4 are susceptible to a vulnerability w CVE-2020-85727.5Element OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are susceptible to a vulnerability which when succes CVE-2020-85736.5The NetApp HCI H610C, H615C and H610S Baseboard Management Controllers (BMC) are shipped with a documented default account and password that CVE-2020-85747.8Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service CVE-2020-85754.4Active IQ Unified Manager for VMware vSphere and Windows versions prior to 9.5 are susceptible to a vulnerability which allows administrativ CVE-2020-85765.4Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited co CVE-2020-85775.9SANtricity OS Controller Software versions 11.50.1 and higher are susceptible to a vulnerability which could allow an attacker to discover s CVE-2020-85783.3Clustered Data ONTAP versions prior to 9.3P20 are susceptible to a vulnerability which could allow an attacker to discover node names via Au CVE-2020-85797.5Clustered Data ONTAP versions 9.7 through 9.7P7 are susceptible to a vulnerability which allows an attacker with access to an intercluster L