High severity · published Mar 26, 2020
CVE-2020-1764
A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1
8.6
CVSS
3.5%
EPSS
No
On KEV
Description
A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alter the Istio configuration.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KI
Kiali · Kiali
before 1.15.1 · source: NVD
OS
Openshift Service Mesh · Redhat
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-1764
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-1764
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764
Exploit
https://kiali.io/news/security-bulletins/kiali-security-001/
More from Kiali
8.6
CVE-2020-1762
An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by…
6.5
CVE-2021-20278
An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used
4.3
CVE-2022-3962
A content spoofing vulnerability was found in Kiali