[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fT7Nkxzkb07UGu6WRpQR-fyS6g6bk31QHH1N2OzZTauQ":3,"g5a-risk:CVE-2018-1000400":112},{"success":4,"data":5,"meta":110},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":62,"weaknesses":63,"weaknessesCount":49,"isActivelyExploited":72,"cisaInfo":15,"otxData":15,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":108,"notableEvents":109},"CVE-2018-1000400","What is CVE-2018-1000400?","Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9.","Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can r...","2018-05-18T18:29:00.233","2019-10-03T00:03:26.223",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",2.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.02008,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"kubernetes","cri-o","*","cpe:2.3:a:kubernetes:cri-o:*:*:*:*:*:*:*:*",1,[51,57],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104262","Securityfocus",[55,56],"Third Party Advisory","VDB Entry",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fgithub.com\u002Fkubernetes-incubator\u002Fcri-o\u002Fpull\u002F1558\u002Ffiles","GitHub",[61,55],"Patch",2,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2018-1000400? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1000400, a high severity cyber security vulnerability from 2018. Kubernetes CRI-O version prior to 1.9 contains a Privileg...","CVE-2018-1000400, CVE-2018-1000400 vulnerability, CVE-2018-1000400 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, kubernetes security, cri-o vulnerability","\u002Fwhat-is\u002Fcve-2018-1000400",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1000400","Cybersecurity","CVE-2018-1000400, CVE-2018-1000400 vulnerability, CVE-2018-1000400 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":15,"Negate":15,"Nodes":101},[102],{"Operator":103,"Negate":15,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":106,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":107,"VersionEndIncluding":15},"70802E01-CBCE-4AB9-BD19-4B2192238DFB","1.9.0",[],[],{"lastModified":11,"cacheTime":111,"version":32},1792248926175,{"score":113,"band":114,"action":115,"scoredAt":116},49,"Medium","Plan remediation","2026-10-16T06:44:04.419438+00:00"]