sigs.k8s.io/secrets-store-csi-driver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2023-2878

Kubernetes secrets-store-csi-driver discloses service account tokens in logs

Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs.

Kubernetes secrets-store-csi-driver secrets-store-csi-driver sigs.k8s.io/secrets-store-csi-driver Wolfi Go

Jun 7, 2023
Medium 5.8

CVE-2020-8568

Kubernetes Secrets Store CSI Driver sync/rotate directory traversal

Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes pa…

Kubernetes Kubernetes Secrets Store CSI Driver sigs.k8s.io/secrets-store-csi-driver Go

Jan 21, 2021