vulnerability
Kubernetes: CVE-2018-18264: Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Jan 3, 2019 | May 14, 2019 | Apr 17, 2026 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Jan 3, 2019
Added
May 14, 2019
Modified
Apr 17, 2026
Description
Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster.
Solution
kubernetes-upgrade-1_10_0
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.