Open redirect in Kubernetes and Fedora - CVE-2018-1002102

Vulnerability identifier: #VU35005

CSH Severity: Low

CVSS v4: 1.8 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-1002102

CWE-ID: CWE-601

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote privileged user to gain access to sensitive information.

Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to redirect API server requests from streaming endpoints to arbitrary hosts. Impacted API servers will follow the redirect as a GET request with client-certificate credentials for authenticating to the Kubelet.

Kubernetes
Fedora
atomic-openshift (Red Hat package)
openshift-ansible (Red Hat package)
atomic-openshift-cluster-autoscaler (Red Hat package)
golang-github-prometheus-alertmanager (Red Hat package)
atomic-openshift-service-idler (Red Hat package)
atomic-openshift-metrics-server (Red Hat package)
atomic-openshift-node-problem-detector (Red Hat package)
openshift-enterprise-autoheal (Red Hat package)
atomic-openshift-web-console (Red Hat package)
atomic-openshift-descheduler (Red Hat package)
openshift-enterprise-cluster-capacity (Red Hat package)
golang-github-openshift-oauth-proxy (Red Hat package)
golang-github-prometheus-node_exporter (Red Hat package)
atomic-enterprise-service-catalog (Red Hat package)
golang-github-prometheus-prometheus (Red Hat package)
atomic-openshift-dockerregistry (Red Hat package)
openshift-kuryr (Red Hat package)
kubernetes
Red Hat OpenShift Container Platform

Install update from vendor's website.

atomic-openshift (Red Hat package) - update to 3.11.346-1.git.0.ea10721.el7
openshift-ansible (Red Hat package) - update to 3.11.346-1.git.0.f65cc70.el7
atomic-openshift-cluster-autoscaler (Red Hat package) - update to 3.11.346-1.git.0.d16fdd8.el7
golang-github-prometheus-alertmanager (Red Hat package) - update to 3.11.346-1.git.0.c2f0036.el7
atomic-openshift-service-idler (Red Hat package) - update to 3.11.346-1.git.15.35bbcf7.el7
atomic-openshift-metrics-server (Red Hat package) - update to 3.11.346-1.git.53.f310e77.el7
atomic-openshift-node-problem-detector (Red Hat package) - update to 3.11.346-1.git.263.335bb76.el7
openshift-enterprise-autoheal (Red Hat package) - update to 3.11.346-1.git.218.08313c9.el7
atomic-openshift-web-console (Red Hat package) - update to 3.11.346-1.git.619.3bb8f35.el7
atomic-openshift-descheduler (Red Hat package) - update to 3.11.346-1.git.299.eda6813.el7
openshift-enterprise-cluster-capacity (Red Hat package) - update to 3.11.346-1.git.379.a389b99.el7
golang-github-openshift-oauth-proxy (Red Hat package) - update to 3.11.346-1.git.439.d3d1b1e.el7
golang-github-prometheus-node_exporter (Red Hat package) - update to 3.11.346-1.git.1062.c498733.el7
atomic-enterprise-service-catalog (Red Hat package) - update to 3.11.346-1.git.1675.f80310c.el7
golang-github-prometheus-prometheus (Red Hat package) - update to 3.11.346-1.git.5026.2eafa83.el7
atomic-openshift-dockerregistry (Red Hat package) - update to 3.11.346-1.git.481.1a70926.el7
openshift-kuryr (Red Hat package) - update to 3.11.346-1.git.1478.b99caab.el7
kubernetes - update to 1.15.7-1.fc31
Red Hat OpenShift Container Platform - update to 3.11.343

• https://github.com/kubernetes/kubernetes/issues/85867
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q56CULSH7F7BC4NPS67ZS23ZCLL5TIVK/

• Open redirect in Kubernetes
• Multiple vulnerabilitis in OpenShift Container Platform
• Fedora 31 update for kubernetes