Skip to content
OpenAdvisories

Product · Kubernetes

azure-file-csi-driver

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-3744

    Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logs

    A security issue was discovered in azure-file-csi-driver where an actor with access to the driver logs could observe service account tokens. These tokens could then potentially be exchanged with external cloud providers to access secrets stored in cloud vault…

    Kubernetes azure-file-csi-driver sigs.k8s.io/azurefile-csi-driver Go