Description
Kubernetes Dashboard存在信息泄露漏洞. 该漏洞是由于存在设计缺陷，允许用户查看私有对象导致的。
Kubernetes Dashboard 认证绕过信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2018-18264
https://www.fortiguard.com/encyclopedia/ips/47377
https://pentest-tools.com/vulnerabilities-exploits/kubernetes-dashboard-1101-authentication-bypass_2815
https://support.huaweicloud.com/bulletin-cce/cce_bulletin_0017.html
https://cloud.tencent.com/developer/article/2285270
https://www.alibabacloud.com/help/tc/ack/product-overview/vulnerability-fixed-cve-2018-18264-in-kubernetes-dashboard
https://help.aliyun.com/zh/ack/product-overview/vulnerability-fixed-cve-2018-18264-in-kubernetes-dashboard
https://www.sysdig.com/blog/privilege-escalation-kubernetes-dashboard
https://securitylabs.datadoghq.com/cloud-security-atlas/vulnerabilities/exposed-kubernetes-dashboard/
https://www.upwind.io/feed/kubernetes-dashboard-features-security-concerns-and-best-practices