CVE-2018-1002102
Fixed in a distro release EPSS <1%CVSS 2.6
Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints to arbitrary hosts. Impacted API servers will follow the redirect as a GET request with client-certificate credentials for authenticating to the Kubelet.
Products: Kubernetes
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | kubeflow-pipelines | 0 |
| Chainguard | kubeflow-pipelines-apiserver | 0 |
| Chainguard | kubeflow-pipelines-cache-deployer | 0 |
| Chainguard | kubeflow-pipelines-cache-deployer-compat | 0 |
| Chainguard | kubeflow-pipelines-cache_server | 0 |
| Chainguard | kubeflow-pipelines-frontend | 0 |
| Chainguard | kubeflow-pipelines-metadata-envoy-config | 0 |
| Chainguard | kubeflow-pipelines-metadata-writer | 0 |
| Chainguard | kubeflow-pipelines-metadata-writer-compat | 0 |
| Chainguard | kubeflow-pipelines-persistence_agent | 0 |
| Chainguard | kubeflow-pipelines-scheduledworkflow | 0 |
| Chainguard | kubeflow-pipelines-viewer-crd-controller | 0 |
| Debian 12 | kubernetes | 1.17.4-1 |
| Debian 13 | kubernetes | 1.17.4-1 |
| Debian 14 | kubernetes | 1.17.4-1 |
| Red Hat openshift 3.11 | atomic-openshift | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-clients | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-clients-redistributable | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-docker-excluder | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-excluder | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-hyperkube | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-hypershift | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-master | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-node | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-pod | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-sdn-ovs | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-template-service-broker | 0:3.11.346-1.git.0.ea10721.el7 |
| Red Hat openshift 3.11 | atomic-openshift-tests | 0:3.11.346-1.git.0.ea10721.el7 |
| Ubuntu 22.04 LTS | kubernetes | no fix |
| Ubuntu 24.04 LTS | kubernetes | no fix |
| Ubuntu Pro 20.04 LTS | kubernetes | no fix |
| Wolfi | kubeflow-pipelines | 0 |
| Wolfi | kubeflow-pipelines-apiserver | 0 |
| Wolfi | kubeflow-pipelines-cache-deployer | 0 |
| Wolfi | kubeflow-pipelines-cache-deployer-compat | 0 |
| Wolfi | kubeflow-pipelines-cache_server | 0 |
| Wolfi | kubeflow-pipelines-frontend | 0 |
| Wolfi | kubeflow-pipelines-metadata-envoy-config | 0 |
| Wolfi | kubeflow-pipelines-metadata-writer | 0 |
| Wolfi | kubeflow-pipelines-metadata-writer-compat | 0 |
| Wolfi | kubeflow-pipelines-persistence_agent | 0 |
| Wolfi | kubeflow-pipelines-scheduledworkflow | 0 |
| Wolfi | kubeflow-pipelines-viewer-crd-controller | 0 |