CVE-2018-1002102

🗓️ 05 Dec 2019 16:05:18Reported by kubernetesType

Improper URL redirection in Kubernetes API server prior to v1.14.0 allows redirecting requests to arbitrary hosts

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server	1 Apr 202120:53	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2018-1002102)	14 Jan 202113:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities	26 Feb 202114:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Python, Docker, and ICP affect IBM Spectrum Discover	13 May 202116:56	–	ibm
Circl	CVE-2018-1002102	7 Mar 202415:41	–	circl
CNVD	Google Kubernetes API Redirection Vulnerability	9 Dec 201900:00	–	cnvd
Cvelist	CVE-2018-1002102 Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints	5 Dec 201916:05	–	cvelist
Debian CVE	CVE-2018-1002102	5 Dec 201916:05	–	debiancve
EUVD	EUVD-2018-2081	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 31 Update: kubernetes-1.15.7-1.fc31	12 Jan 202001:50	–	fedora

NVD

Node

kubernetes kubernetesRange1.10.0–1.13.13

kubernetes kubernetesMatch1.14.0alpha0

kubernetes kubernetesMatch1.14.0alpha1

Node

fedoraproject fedoraMatch31

[
  {
    "product": "Kubernetes",
    "vendor": "Kubernetes",
    "versions": [
      {
        "lessThan": "v1.14.0",
        "status": "affected",
        "version": "v1.14",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/kubernetes/kubernetes/issues/85867
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q56CULSH7F7BC4NPS67ZS23ZCLL5TIVK/

21 Nov 2024 03:40Current

4.1Medium risk

Vulners AI Score4.1

CVSS 22.1

CVSS 3.12.6

EPSS0.00206

CWE-601