CVE-2018-18264

Published January 3rd, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

MEDIUM

Affected

PROJECT

Description

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster.

kubernetes-retired/dashboard

General-purpose web UI for Kubernetes clusters

GitHub

15.4K