Lucene search
Veracode Vulnerability DatabaseVERACODE:7927HistoryDec 04, 2018 - 4:23 a.m.
Privilege Escalation
2018-12-0404:23:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
EPSS
0.346
Percentile
97.2%
github.com/kubernetes/kubernetes is vulnerable to privilege escalation. Authenticated users are able to directly access a backend server through the Kubernetes API server using specially crafted requests. A remote attacker who is authenticated to the Kubernetes API server only will be able to send arbitrary requests to the backend.
Related
nvd
nvd
CVE-2018-1002105
2018-12-05 21:29:00
redhat
redhat
(RHSA-2018:3754) Critical: OpenShift Container Platform 3.3 security update
2018-12-03 17:17:50
(RHSA-2018:3742) Critical: OpenShift Container Platform 3.2 security update
2018-12-03 17:14:24
(RHSA-2018:3551) Critical: OpenShift Container Platform 3.8 security update
2018-11-19 12:20:44
oraclelinux
oraclelinux
kubernetes security update
2018-12-11 00:00:00
kubernetes security update
2019-02-14 00:00:00
kubernetes kubeadm-ha-setup kubeadm-upgrade security update
2020-04-17 00:00:00
nessus
nessus
Photon OS 2.0: Kubernetes PHSA-2018-2.0-0112 (deprecated)
2018-12-18 00:00:00
RHEL 7 : OpenShift Container Platform 3.3 (RHSA-2018:3754)
2018-12-04 00:00:00
RHEL 7 : OpenShift Container Platform 3.4 (RHSA-2018:3752)
2018-12-04 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: kubernetes-1.12.5-2.fc29
2019-03-15 18:30:40
[SECURITY] Fedora 29 Update: origin-3.11.1-1.fc29
2018-12-24 06:08:01
debiancve
debiancve
CVE-2018-1002105
2018-12-05 21:29:00
osv
osv
CVE-2018-1002105
2018-12-05 21:29:00
Privilege Escalation in Kubernetes in github.com/kubernetes/kubernetes
2024-08-21 15:28:59
Privilege Escalation in Kubernetes
2022-02-15 01:57:18
cvelist
cvelist
CVE-2018-1002105
2018-12-05 21:00:00
github
github
Privilege Escalation in Kubernetes
2022-02-15 01:57:18
ubuntucve
ubuntucve
CVE-2018-1002105
2018-12-05 00:00:00
prion
prion
Code injection
2018-12-05 21:29:00
threatpost
threatpost
Kubernetes Flaw is a "Huge Deal," Lays Open Cloud Deployments
2018-12-05 15:47:59
Public Bug Bounty Takes Aim at Kubernetes Container Project
2020-01-14 17:00:28
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
2019-10-17 14:25:39
ibm
ibm
Security Bulletin: IBM API Connect is affected by a critical privilege escalation vulnerability in Kubernetes (CVE-2018-1002105)
2018-12-18 16:05:01
cve
cve
CVE-2018-1002105
2018-12-05 21:29:00
openvas
openvas
Fedora Update for kubernetes FEDORA-2019-3ecff65275
2019-05-07 00:00:00
Fedora Update for origin FEDORA-2018-314913636b
2019-05-07 00:00:00
openSUSE: Security Advisory for kubernetes (openSUSE-SU-2020:0554-1)
2020-04-27 00:00:00
qualysblog
qualysblog
Container Security Becomes a Priority for Enterprises
2019-01-09 17:00:14
coalfire
coalfire
exploitdb
exploitdb
Kubernetes - (Unauthenticated) Arbitrary Requests
2018-12-10 00:00:00
Kubernetes - (Authenticated) Arbitrary Requests
2018-12-10 00:00:00
exploitpack
exploitpack
Kubernetes - (Unauthenticated) Arbitrary Requests
2018-12-10 00:00:00
Kubernetes - (Authenticated) Arbitrary Requests
2018-12-10 00:00:00
redhatcve
redhatcve
CVE-2018-1002105
2020-04-08 21:05:58
cloudfoundry
cloudfoundry
myhack58
myhack58
photon
photon
veracode
veracode
Privilege Escalation
2019-01-15 09:25:14
zdt
zdt
Kubernetes - (Unauthenticated) Arbitrary Requests Exploit
2018-12-24 00:00:00
Kubernetes - (Authenticated) Arbitrary Requests Exploit
2018-12-24 00:00:00
suse
suse
Security update for kubernetes (important)
2020-04-26 00:00:00
kitploit
kitploit