Description
Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Kubernetes Dashboard <1.10.1 - Authentication Bypass http/cves/2018/CVE-2018-18264.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- https://sysdig.com/blog/privilege-escalation-kubernetes-dashboard/
- 106493 vdb-entry
- https://groups.google.com/forum/#%21topic/kubernetes-announce/yBrFf5nmvfI
- https://github.com/kubernetes/dashboard/releases/tag/v1.10.1
- https://github.com/kubernetes/dashboard/pull/3400
- https://github.com/kubernetes/dashboard/pull/3289