Database/Container, Kubernetes & orchestration
azure-file-csi-driver: Service account tokens disclosed in driver logs
CVSS 6.5CVE-2024-3744Container, Kubernetes & orchestrationcurated
Impact
Service account tokens disclosed in driver logs
Who can reach it
Anyone with log-pipeline read access
What to do
DaemonSet rollout; rotate tokens; scrub logs
References
Related entries
- Envoy: External clients manipulate Envoy internal headers, reaching unauthorized behaviourCVE-2024-45806 · EnvoyMedium
- Headlamp: Credential caching in Headlamp when Helm is enabledCVE-2025-14269 · HeadlampMedium
- Kubernetes (kubelet): gitRepo volume grants inadvertent access to local repositories on the nodeCVE-2025-1767 · Kubernetes (kubelet)Medium
- Cilium: Insecure default Access-Control-Allow-Origin in Hubble UI exposes sensitive observability dataCVE-2025-23047 · CiliumMedium
- Helm: Decompression bomb chart exhausts memory on the rendering hostCVE-2025-32386 · HelmMedium
- Helm: Deeply nested JSON Schema references cause stack overflowCVE-2025-32387 · HelmMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.