Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2018-1002102

Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints to arbitrary hosts. Impacted API servers will follow the redirect as a GET request with client-certificate credentials for authenticating to the Kubelet.

  • Published: Dec 5, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-1002102
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 2.6
  • AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:N/AC:H/Au:S/C:P/I:N/A:N

CWEs:

Software From Fixed in
kubernetes / kubernetes 1.14.0-alpha0 1.14.0-alpha0.x
kubernetes / kubernetes 1.14.0-alpha1 1.14.0-alpha1.x
kubernetes / kubernetes 1.10.0 1.13.13.x
fedoraproject / fedora 31 31.x