Read the docs
TI-2018-16127 Aliases CVE-2018-1002102

Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints

Priority LOW 14CWE-601Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
High
Impact type
Spoofing
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-601.

Summary

Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints to arbitrary hosts. Impacted API servers will follow the redirect as a GET request with client-certificate credentials for authenticating to the Kubelet.

Why it matters now

EPSS 0.00618 49th percentileScored 2026-11-07
Fix Fixed Kubernetes (Kubernetes): v1.14.0Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
KubernetesKubernetesv1.14 to before v1.14.0v1.14.0Patch availableCNA
  • Kubernetes VendorKubernetes Affected v1.14 to before v1.14.0 Fixed in v1.14.0 Patch available CNA

CPE configurations NVD · 4

CPEVersionsRoleVendor
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*1.10.0 – 1.13.13VulnerableKubernetes
cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha0:*:*:*:*:*:*1.14.0 alpha0VulnerableKubernetes
cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha1:*:*:*:*:*:*1.14.0 alpha1VulnerableKubernetes
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*31VulnerableFedoraproject
  • cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:* Versions 1.10.0 – 1.13.13 Vulnerable ·Kubernetes
  • cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha0:*:*:*:*:*:* Versions 1.14.0 alpha0 Vulnerable ·Kubernetes
  • cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha1:*:*:*:*:*:* Versions 1.14.0 alpha1 Vulnerable ·Kubernetes
  • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* Versions 31 Vulnerable ·Fedoraproject

Remediation

  • Fix · CNA Kubernetes (Kubernetes) Fixed in v1.14.0

Red Hat 1 advisory

  • RHSA-2020:5363 Released 2020-12-16 · Red Hat rating Moderate
    OpenShift Container Platform 3.11.346 security and bug fix update
    • Red Hat OpenShift Container Platform 3.11 atomic-openshift-3.11.346-1.git.0.ea10721.el7, atomic-openshift-clients-3.11.346-1.git.0.ea10721.el7, atomic-openshift-clients-redistributable-3.11.346-1.git.0.ea10721.el7 +10

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift Container Platform 3.11Fixed RHSA-2020:5363
Not affected: 3 products
  • Red Hat OpenShift Container Platform 3.11
  • Red Hat OpenShift Container Platform 4
  • Red Hat Storage 3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-1002102

References

Advisory 2

  • TI-2018-16130 Improper privilege management in Kubernetes CVSS 3.0CRITICAL 9.8
  • TI-2019-08418 Kubernetes kubelet exposes /debug/pprof info on healthz port CVSS 3.1HIGH 8.2
  • TI-2023-05086 Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation CVSS 3.1HIGH 8.8
  • TI-2023-03433 Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation CVSS 3.1HIGH 8.8
  • TI-2023-02285 Bypass of seccomp profile enforcement CVSS 3.1MEDIUM 5.5
  • TI-2017-14755 Link following in Kubernetes CVSS 3.0CRITICAL 9.6
See all 55 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences