GO-2022-0629

    Dashboard / Vulnerabilities / GO-2022-0629

    GO-2022-0629

    Published: 15 Feb 2022Last Modified: 20 May 2024

    Summary: Directory traversal in sigs.k8s.io/secrets-store-csi-driver

    Details: Modifying pod status allows host directory traversal. Kubernetes Secrets Store CSI Driver allows an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem and sync file contents to Kubernetes Secrets. This includes paths under var/lib/kubelet/pods that contain other Kubernetes Secrets.

    References: https://github.com/kubernetes-sigs/secrets-store-csi-driver/pull/371, https://github.com/kubernetes-sigs/secrets-store-csi-driver/commit/c2cbb19e2eef16638fa0523383788a4bc22231fd

    Affected packages

    Package

    Name: sigs.k8s.io/secrets-store-csi-driver

    Purl: pkg:golang/sigs.k8s.io/secrets-store-csi-driver

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0.0.15
    Fixed -0.0.17

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High