PT-2021-12792 · Kubernetes · Kubernetes Secrets Store Csi Driver Gcp Plugin+1

Tam7T + 1 · Published 2021-01-21 · Updated 2024-06-05 · CVE-2020-8567

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Kubernetes Secrets Store CSI Driver Vault Plugin versions prior to v0.0.6 Kubernetes Secrets Store CSI Driver Azure Plugin versions prior to v0.0.10 Kubernetes Secrets Store CSI Driver GCP Plugin versions prior to v0.2.0

Description: The issue allows an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods. This can be achieved by exploiting the vulnerability in the Kubernetes Secrets Store CSI Driver plugins.

Recommendations: For Kubernetes Secrets Store CSI Driver Vault Plugin versions prior to v0.0.6, update to version v0.0.6 or later. For Kubernetes Secrets Store CSI Driver Azure Plugin versions prior to v0.0.10, update to version v0.0.10 or later. For Kubernetes Secrets Store CSI Driver GCP Plugin versions prior to v0.2.0, update to version v0.2.0 or later. As a temporary workaround, consider restricting the creation of SecretProviderClass objects to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-24

CWE-22

Related Identifiers

CVE-2020-8567

GHSA-2V35-WJ4R-RCMV

GO-2024-2750

Affected Products

Kubernetes Secrets Store Csi Driver Azure Plugin

Kubernetes Secrets Store Csi Driver Gcp Plugin

References · 11

• https://github.com/kubernetes-sigs/secrets-store-csi-driver/issues/384 · Patch
• https://osv.dev/vulnerability/CVE-2020-8567 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8567 · Security Note
• https://osv.dev/vulnerability/GHSA-2v35-wj4r-rcmv · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-2750 · Vendor Advisory
• https://github.com/Azure/secrets-store-csi-driver-provider-azure/pull/298 · Note
• https://github.com/hashicorp/secrets-store-csi-driver-provider-vault/pull/50 · Note
• https://github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp/pull/74 · Note
• https://github.com/advisories/GHSA-2v35-wj4r-rcmv · Note
• https://groups.google.com/g/kubernetes-secrets-store-csi-driver/c/BI2qisiNXHY · Note
• https://t.me/cibsecurity/22502 · Telegram Post