Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2018-1002102
HistoryDec 05, 2019 - 4:15 p.m.

CVE-2018-1002102

2019-12-0516:15:10
Debian Security Bug Tracker
security-tracker.debian.org
6

CVSS2

2.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:N/A:N

CVSS3

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N

EPSS

0.001

Percentile

22.7%

JSON

Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints to arbitrary hosts. Impacted API servers will follow the redirect as a GET request with client-certificate credentials for authenticating to the Kubelet.

Related

ubuntucve 1
cvelist 1
osv 2
cve 1
ibm 4
nvd 1
redhatcve 1
openvas 1
symantec 1
prion 1
veracode 1
nessus 2
fedora 1
redhat 1
ubuntucve
ubuntucve
CVE-2018-1002102
2019-12-05 00:00:00
cvelist
cvelist
CVE-2018-1002102 Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints
2018-09-26 00:00:00
osv
osv
CGA-4xmg-fgrg-2hvg
2024-06-06 12:23:51
CVE-2018-1002102
2019-12-05 16:15:10
cve
cve
CVE-2018-1002102
2019-12-05 16:15:10
ibm
ibm
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2018-1002102)
2021-01-14 13:24:15
Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities
2021-02-26 14:46:18
Security Bulletin: Multiple vulnerabilities in Kubernetes affect IBM InfoSphere Information Server
2021-04-01 20:53:50
nvd
nvd
CVE-2018-1002102
2019-12-05 16:15:10
redhatcve
redhatcve
CVE-2018-1002102
2019-12-17 20:41:44
openvas
openvas
Fedora Update for kubernetes FEDORA-2020-943f4b03d2
2020-01-12 00:00:00
symantec
symantec
Kubernetes API Server CVE-2018-1002102 Open Redirection Vulnerability
2019-12-03 00:00:00
prion
prion
Input validation
2019-12-05 16:15:00
veracode
veracode
Unvalidated Redirect
2019-12-05 07:35:32
nessus
nessus
Fedora 31 : kubernetes (2020-943f4b03d2)
2020-01-13 00:00:00
RHEL 7 : OpenShift Container Platform 3.11.346 (RHSA-2020:5363)
2020-12-18 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: kubernetes-1.15.7-1.fc31
2020-01-12 01:50:30
redhat
redhat
(RHSA-2020:5363) Moderate: OpenShift Container Platform 3.11.346 security and bug fix update
2020-12-16 12:21:43

CVSS2

2.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:N/A:N

CVSS3

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N

EPSS

0.001

Percentile

22.7%

JSON
Related for DEBIANCVE:CVE-2018-1002102
ubuntucve1cvelist1osv2cve1ibm4nvd1redhatcve1openvas1symantec1prion1veracode1nessus2fedora1redhat1