[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ft35KVohdCIz37O2NV-YiXcnXIXSetf_ka2TdZEWxxo0":3,"g5a-risk:CVE-2018-1002105":249},{"success":4,"data":5,"meta":247},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":15,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":85,"references":86,"referencesCount":162,"weaknesses":163,"weaknessesCount":167,"isActivelyExploited":168,"cisaInfo":15,"otxData":15,"relatedBlogPosts":169,"seoMetadata":170,"configurations":195,"relatedVendorCves":245,"notableEvents":246},"CVE-2018-1002105","What is CVE-2018-1002105?","In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.","In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver a...","2018-12-05T21:29:00.403","2023-11-07T02:51:15.253",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":34,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"a6081bf6-c852-4425-ad4f-a67919267565","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},[35],{"Source":18,"Type":19,"CVSSData":36,"BaseSeverity":26,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":37,"VectorString":38,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.86978,[43,43,43,43,43,43,43],"Critical",[47,51,54,59,62,65,68,71,74,77,80],{"vendor":48,"product":48,"version":49,"criteria":50,"vulnerable":4},"kubernetes","*","cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",{"vendor":48,"product":48,"version":52,"criteria":53,"vulnerable":4},"1.9.12","cpe:2.3:a:kubernetes:kubernetes:1.9.12:beta0:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"redhat","openshift_container_platform","3.2","cpe:2.3:a:redhat:openshift_container_platform:3.2:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":60,"criteria":61,"vulnerable":4},"3.3","cpe:2.3:a:redhat:openshift_container_platform:3.3:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":63,"criteria":64,"vulnerable":4},"3.4","cpe:2.3:a:redhat:openshift_container_platform:3.4:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":66,"criteria":67,"vulnerable":4},"3.5","cpe:2.3:a:redhat:openshift_container_platform:3.5:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":69,"criteria":70,"vulnerable":4},"3.6","cpe:2.3:a:redhat:openshift_container_platform:3.6:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":72,"criteria":73,"vulnerable":4},"3.8","cpe:2.3:a:redhat:openshift_container_platform:3.8:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":75,"criteria":76,"vulnerable":4},"3.10","cpe:2.3:a:redhat:openshift_container_platform:3.10:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":78,"criteria":79,"vulnerable":4},"3.11","cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",{"vendor":81,"product":82,"version":83,"criteria":84,"vulnerable":4},"netapp","trident","-","cpe:2.3:a:netapp:trident:-:*:*:*:*:*:*:*",11,[87,91,95,98,101,107,111,114,117,120,123,126,129,132,137,143,147,151,155,159],{"url":88,"source":89,"tags":90},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-04\u002Fmsg00041.html","Opensuse",[],{"url":92,"source":93,"tags":94},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F06\u002F28\u002F2","Openwall",[],{"url":96,"source":93,"tags":97},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F07\u002F06\u002F3",[],{"url":99,"source":93,"tags":100},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F07\u002F06\u002F4",[],{"url":102,"source":103,"tags":104},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F106068","Securityfocus",[105,106],"VDB Entry","Third Party Advisory",{"url":108,"source":109,"tags":110},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3537","Red Hat",[106],{"url":112,"source":109,"tags":113},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3549",[106],{"url":115,"source":109,"tags":116},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3551",[106],{"url":118,"source":109,"tags":119},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3598",[106],{"url":121,"source":109,"tags":122},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3624",[106],{"url":124,"source":109,"tags":125},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3742",[106],{"url":127,"source":109,"tags":128},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3752",[106],{"url":130,"source":109,"tags":131},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3754",[106],{"url":133,"source":134,"tags":135},"https:\u002F\u002Fgithub.com\u002Fevict\u002Fpoc_CVE-2018-1002105","GitHub",[136,106],"Exploit",{"url":138,"source":134,"tags":139},"https:\u002F\u002Fgithub.com\u002Fkubernetes\u002Fkubernetes\u002Fissues\u002F71411",[140,141,142,106],"Mitigation","Issue Tracking","Patch",{"url":144,"source":145,"tags":146},"https:\u002F\u002Fgroups.google.com\u002Fforum\u002F#%21topic\u002Fkubernetes-announce\u002FGVllWCg6L88","Google",[],{"url":148,"source":149,"tags":150},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20190416-0001\u002F","Netapp",[106],{"url":152,"source":153,"tags":154},"https:\u002F\u002Fwww.coalfire.com\u002FThe-Coalfire-Blog\u002FDecember-2018\u002FKubernetes-Vulnerability-What-You-Can-Should-Do","Coalfire",[140,106],{"url":156,"source":157,"tags":158},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46052\u002F","Exploit-db",[105,136,106],{"url":160,"source":157,"tags":161},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F46053\u002F",[136,106,105],20,[164],{"id":165,"name":165,"description":166},"Unknown","CWE-388",1,false,[],{"title":171,"metaDescription":172,"keywords":173,"canonicalUrl":174,"structuredData":175},"What is CVE-2018-1002105? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2018-1002105, a critical severity cyber security vulnerability from 2018. High exploit probability (87.0%). In all Kubernetes v...","CVE-2018-1002105, CVE-2018-1002105 vulnerability, CVE-2018-1002105 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, kubernetes security, redhat security, kubernetes vulnerability, openshift_container_platform vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2018-1002105",{"@context":176,"@type":177,"headline":171,"description":172,"datePublished":10,"dateModified":11,"author":178,"publisher":182,"about":186,"mainEntityOfPage":190,"articleSection":193,"keywords":194},"https:\u002F\u002Fschema.org","TechArticle",{"@type":179,"name":180,"url":181},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":179,"name":180,"url":181,"logo":183},{"@type":184,"url":185},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":187,"name":6,"description":188,"additionalType":189},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":191,"@id":192},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2018-1002105","Cybersecurity","CVE-2018-1002105, CVE-2018-1002105 vulnerability, CVE-2018-1002105 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[196,219,239],{"Operator":15,"Negate":15,"Nodes":197},[198],{"Operator":199,"Negate":15,"CPEMatch":200},"OR",[201,205,209,213,217],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":202,"VersionStartExcluding":15,"VersionStartIncluding":203,"VersionEndExcluding":15,"VersionEndIncluding":204},"389826D3-C28B-4EA5-8398-307B06A09A65","1.0.0","1.9.11",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":206,"VersionStartExcluding":15,"VersionStartIncluding":207,"VersionEndExcluding":15,"VersionEndIncluding":208},"A71A5EC9-75B0-43DE-B77D-B560D350E99D","1.10.0","1.10.10",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":210,"VersionStartExcluding":15,"VersionStartIncluding":211,"VersionEndExcluding":15,"VersionEndIncluding":212},"96DEFC7F-6DBC-43C0-AF50-4B8B89A4634D","1.11.0","1.11.4",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":214,"VersionStartExcluding":15,"VersionStartIncluding":215,"VersionEndExcluding":15,"VersionEndIncluding":216},"08512A98-DAED-4C31-8B23-A5DF260EA78B","1.12.0","1.12.2",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":218,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B4C657CF-5878-465A-BEC7-2718AB267C77",{"Operator":15,"Negate":15,"Nodes":220},[221],{"Operator":199,"Negate":15,"CPEMatch":222},[223,225,227,229,231,233,235,237],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":224,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C10044B3-FBB1-4031-9060-D3A2915B164C",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":226,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EA3ADA26-2B9E-4ABA-A224-910BD75CCE00",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":228,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"67E80045-56E4-4A83-8168-CFED5E55CE45",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":230,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E792B5DC-CCD2-4A50-B72F-860A3BFAF165",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":232,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B75DC91F-0D25-42F9-8B7B-3ECCE6AB8174",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":234,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E50A070E-96A9-45D7-B155-00243D17F7A7",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":236,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4DBCD38F-BBE8-488C-A8C3-5782F191D915",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":238,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"2F87326E-0B56-4356-A889-73D026DB1D4B",{"Operator":15,"Negate":15,"Nodes":240},[241],{"Operator":199,"Negate":15,"CPEMatch":242},[243],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":244,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5D9A34F5-AC03-4098-A37D-AD50727DDB11",[],[],{"lastModified":11,"cacheTime":248,"version":37},1793196823051,{"score":250,"band":251,"action":252,"scoredAt":253},71,"High","Patch now","2026-07-01T10:22:59.257534+00:00"]