Security Advisory

CVE-2023-30512

6.5
MEDIUM

Vulnerability Description

CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list all secrets, including the admin secret.
Published Date April 12, 2023
Official Source NIST NVD Advisory