Security readout for executives and security teams
Plain-English summary
CVE-2018-8728 is a cross-site scripting issue in Kontena before 1.5.0. A browser viewing the remote login code display could run attacker-supplied script if the vulnerable page is exposed. There is no provided evidence of active exploitation or a CVSS score.
Executive priority
Prioritize as a targeted cleanup item for any legacy Kontena environment. Urgency rises if the remote login flow is internet-facing or used by administrators.
Technical view
The CVE describes XSS in server/app/views/static/code.html, affecting the code display used by kontena master login --remote. The weakness is demonstrated through the code value in the page URI fragment. Public sources identify Kontena before 1.5.0 and reference a GitHub pull request and the v1.5.0 release.
Likely exposure
Exposure is likely limited to organizations running Kontena versions before 1.5.0 with the vulnerable remote login code display reachable by users or administrators.
Exploitation context
The source bundle does not cite KEV listing, public exploitation, or exploit maturity. Treat this as a potentially user-assisted browser-side issue until asset exposure and version status are confirmed.
Researcher notes
Evidence is sparse: no CVSS, CWE, affected CPEs, or exploitation record are supplied. The most reliable indicators are the CVE description, GitHub PR, and v1.5.0 release reference.
Mitigation direction
- Identify any Kontena deployments and their installed versions.
- Upgrade affected Kontena deployments to version 1.5.0 or later.
- Restrict access to the remote login code display until upgraded.
- Review the referenced vendor pull request and release notes for fix details.
- Monitor web access logs for unusual requests to the code display route.
Validation and detection
- Confirm whether Kontena is present in production, staging, or legacy environments.
- Verify each instance is running version 1.5.0 or later.
- Check whether the remote login code display page is reachable.
- Review recent logs for unexpected access to the vulnerable page.
- Use controlled, non-script test values if validation is required.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2018-8728 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/kontena/kontena/pull/3223CVE reference · x_refsource_MISC
- https://lgtm.com/projects/g/kontena/kontena/rev/06a7a06e65a5ef0dada14faee2ae20388b87c1feCVE reference · x_refsource_MISC
- https://github.com/kontena/kontena/releases/tag/v1.5.0CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.