CVE-2018-2475

HIGH

Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster. Due to missing network isolation a shoot's apiserver can...

Affects 1 product across 1 vendor.

CVSS 3.08.5
EPSS1.3%
Percentile71th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, high complexity, low privileges required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2018. A high severity vulnerability affects Gardener systems (CVE-2018-2475). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2018-GLOBAL-129038-H • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2018-2475?
This vulnerability was disclosed in 2018. A high severity vulnerability affects Gardener systems (CVE-2018-2475). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2018-2475?
CVE-2018-2475 has CVSS 8.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS: 1.3%.
Is CVE-2018-2475 actively exploited?
No confirmed active exploitation of CVE-2018-2475 as of 2026-09-25.
How do I remediate CVE-2018-2475?
Priority: MEDIUM. PSIRT: [email protected]
What systems are affected by CVE-2018-2475?
CVE-2018-2475 affects Gardener Gardener.
Vulnerability Details
CVE IDCVE-2018-2475
BSIDBS-2018-GLOBAL-129038-H BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published2018-10-09
Last Modified2026-06-17
ICS Relevance0%
SourceNVD
Official Description

Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster. Due to missing network isolation a shoot's apiserver can access services/endpoints in the private network of its corresponding seed cluster. Combined with other minor Kubernetes security issues, the missing network isolation theoretically can lead to compromise other shoot or seed clusters in the "Gardener" context. The issue is rated high due to the high impact of a potential exploitation in "Gardener" context. This was fixed in Gardener release 0.12.4.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster. Due to missing network isolation a shoot's apiserver can access services/endpoints in the private network of its corresponding seed cluster. Combined with other minor Kubernetes security issues, the missing network isolation theoretically can lead to compromise other shoot or seed clusters in the "Gardener" context. The issue is rated high due to the high i CVSS vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Gardener Gardener < 0.12.4
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2928 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashb30e900cfae5f4d50e2be911b2f316e9e1432c3c7030e382a1f7eaec81d1952a5170774d4c4cf9eb7b69afc4c0e2e70625265f06afbff31ea5f024c2b3c5aca6
Related CVEs affecting Gardener
CVE-2025-47283 9.9 Gardener implements the automated management and operation of Kubernetes clus... CVE-2025-47284 9.9 Gardener implements the automated management and operation of Kubernetes clus... CVE-2025-59823 9.9 Project Gardener implements the automated management and operation of Kuberne... CVE-2025-47282 9.9 Gardener External DNS Management is an environment to manage external DNS ent... CVE-2019-12494 7.5 In Gardener before 0.20.0, incorrect access control in seed clusters allows i...
View all Gardener CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →