PT-2018-1334 · Linux Foundation+1 · Kubernetes+1

Published 2018-05-16 · Updated 2019-10-09 · CVE-2018-0268

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Digital Network Architecture (DNA) Center versions 1.1.3 and prior

Description A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges. This issue is due to an insecure default configuration of the Kubernetes container management subsystem within DNA Center. An attacker who has access to the Kubernetes service port could execute commands with elevated privileges within provisioned containers, potentially resulting in a complete compromise of affected containers.

Recommendations For versions 1.1.3 and prior, update to a version later than 1.1.3 to resolve the issue. As a temporary workaround, consider restricting access to the Kubernetes service port to minimize the risk of exploitation. Additionally, review and secure the default configuration of the Kubernetes container management subsystem to prevent unauthorized access.

Fix

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-358

Related Identifiers

BDU:2018-00832

CVE-2018-0268

Affected Products

Cisco Digital Network Architecture (Dna) Center

Kubernetes

References · 7

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00832 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0268 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0268 · Vendor Advisory
• https://threatpost.ru/cisco-finds-and-removes-hardcoded-admin-password-in-dna-center/26119 · Note
• http://securityfocus.com/bid/104192 · Note
• https://securitylab.ru/news/493336.php · Note