CVE-2018-0268
First published: Thu May 17 2018(Updated: )
A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges. This vulnerability is due to an insecure default configuration of the Kubernetes container management subsystem within DNA Center. An attacker who has the ability to access the Kubernetes service port could execute commands with elevated privileges within provisioned containers. A successful exploit could result in a complete compromise of affected containers. This vulnerability affects Cisco DNA Center Software Releases 1.1.3 and prior. Cisco Bug IDs: CSCvi47253.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Digital Network Architecture Center | <=1.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-0268?
CVE-2018-0268 is a vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center that allows an unauthenticated, remote attacker to bypass authentication and gain elevated privileges.
What is the severity of CVE-2018-0268?
CVE-2018-0268 has a severity level of critical.
How does CVE-2018-0268 affect Cisco Digital Network Architecture (DNA) Center?
CVE-2018-0268 affects Cisco Digital Network Architecture (DNA) Center versions up to and including 1.1.3.
How can an attacker exploit CVE-2018-0268?
An attacker can exploit CVE-2018-0268 by exploiting the insecure default configuration of the Kubernetes container management system in Cisco Digital Network Architecture (DNA) Center.
Where can I find more information about CVE-2018-0268?
You can find more information about CVE-2018-0268 on the following websites: - [SecurityFocus](http://www.securityfocus.com/bid/104192) - [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna)
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/type
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco digital network architecture center
- version/cisco digital network architecture center/1.1.3