CVE-2018-1002104

score

<0.1

cvss

5.3

epss

1.1%

published

2020-01-14

kev added

—

first seen

2026-10-21

Kubernetes ingress default backend versions < 1.5 contain a security misconfiguration causing prometheus metrics to be exposed publicly, letting unauthenticated users access sensitive metrics, exploit requires accessing exposed metrics endpoint.