title: Privilege escalation from compromised node to cluster
description: The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise.
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
product: Kubernetes
vendor: Kubernetes
versions:
status: affected, version: 1.6
status: affected, version: 1.7
status: affected, version: 1.8
status: affected, version: 1.9
status: affected, version: 1.10
status: affected, version: 1.11
status: affected, version: 1.12
status: affected, version: 1.13
status: affected, version: 1.14
status: affected, version: 1.15
lessThanOrEqual: 1.16.12, status: affected, version: 1.16, versionType: custom
lessThanOrEqual: 1.17.8, status: affected, version: 1.17, versionType: custom
lessThanOrEqual: 1.18.5, status: affected, version: 1.18, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]