Privilege Escalation

🗓️ 04 Dec 2018 04:23:48Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 28 Views

Kubernetes privilege escalation vulnerability via API server

Reporter	Title	Published	Views	Family All 126
IBM Security Bulletins	Security Bulletin: IBM Cloud Private for Data is affected by a privilege escalation vulnerability in Kubernetes API server	3 Oct 201922:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is affected by a privilege escalation vulnerability in Kubernetes API server	7 Dec 201817:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local	20 Dec 201913:53	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability Has Been Identified In IBM Cloud Private shipped with IBM Cloud Private for Data - CVE-ID: CVE-2018-1002105	3 Oct 201922:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by a critical privilege escalation vulnerability in Kubernetes (CVE-2018-1002105)	18 Dec 201816:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a privilege escalation vulnerability in Kubernetes API server	6 Dec 201816:25	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability Has Been Identified In IBM Cloud Private shipped with IBM Event Streams CVE-ID: CVE-2018-1002105	7 Dec 201817:00	–	ibm
0day.today	Kubernetes - (Authenticated) Arbitrary Requests Exploit	24 Dec 201800:00	–	zdt
0day.today	Kubernetes - (Unauthenticated) Arbitrary Requests Exploit	24 Dec 201800:00	–	zdt

Vulners

Node

kubernetes github.com/kubernetes/kubernetesRange0.16.0–1.13.0-beta.2go

OR

kubernetes github.com/kubernetes/apimachineryMatchheadgo

Source	Link
github	www.github.com/kubernetes/apimachinery/commit/b5d13f078af116d09ad9c323357497a0e9f623fc
github	www.github.com/kubernetes/kubernetes/issues/71411
github	www.github.com/kubernetes/kubernetes/pull/71412
github	www.github.com/kubernetes/kubernetes/commit/b84e3dd6f80af4016acfd891ef6cc5
securityfocus	www.securityfocus.com/bid/106068
exploit-db	www.exploit-db.com/exploits/46052/
exploit-db	www.exploit-db.com/exploits/46053/
github	www.github.com/evict/poc_CVE-2018-1002105
groups	www.groups.google.com/forum/
security	www.security.netapp.com/advisory/ntap-20190416-0001/

08 Nov 2023 00:33Current

9.1High risk

Vulners AI Score9.1

CVSS 39.8

CVSS 27.5

EPSS0.90189

kubernetes privilege escalation vulnerability api server backend remote attacker authenticated user arbitrary requests