Medium severity6.5NVD Advisory· Published Jun 7, 2023· Updated Jun 17, 2026
CVE-2023-2878
CVE-2023-2878
Description
Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
sigs.k8s.io/secrets-store-csi-driverGo | < 1.3.3 | 1.3.3 |
Affected products
11- osv-coords9 versionspkg:apk/chainguard/vault-csi-providerpkg:apk/chainguard/secrets-store-csi-driver-crdspkg:apk/wolfi/secrets-store-csi-driverpkg:golang/sigs.k8s.io/secrets-store-csi-driverpkg:apk/chainguard/vault-csi-provider-compatpkg:apk/chainguard/secrets-store-csi-driverpkg:apk/wolfi/secrets-store-csi-driver-crdspkg:apk/wolfi/vault-csi-providerpkg:apk/wolfi/vault-csi-provider-compat
< 1.4.0-r9+ 8 more
- (no CPE)range: < 1.4.0-r9
- (no CPE)range: < 1.3.3-r0
- (no CPE)range: < 1.3.3-r0
- (no CPE)range: < 1.3.3
- (no CPE)range: < 1.4.0-r9
- (no CPE)range: < 1.3.3-r0
- (no CPE)range: < 1.3.3-r0
- (no CPE)range: < 1.4.0-r9
- (no CPE)range: < 1.4.0-r9
cpe:2.3:a:kubernetes:secrets-store-csi-driver:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kubernetes:secrets-store-csi-driver:*:*:*:*:*:*:*:*range: <1.3.3
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
8- github.com/kubernetes/kubernetes/issues/118419nvdExploitIssue TrackingWEB
- github.com/advisories/GHSA-g82w-58jf-gcxxghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-2878ghsaADVISORY
- security.netapp.com/advisory/ntap-20230814-0003/nvdThird Party Advisory
- github.com/kubernetes-sigs/secrets-store-csi-driver/releases/tag/v1.3.3ghsaWEB
- github.com/kubernetes-sigs/secrets-store-csi-driver/security/advisories/GHSA-g82w-58jf-gcxxghsaWEB
- groups.google.com/g/kubernetes-security-announce/c/5K8ghQHBDdQ/m/Udee6YUgAAAJnvdMailing ListWEB
- security.netapp.com/advisory/ntap-20230814-0003ghsaWEB
News mentions
0No linked articles in our index yet.