Kiali 0.2.0 Alpha

CPE Details

Kiali 0.2.0 Alpha
kiali
kiali
0.2.0
2020-03-27
13h00 +00:00
2020-03-27
13h00 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:kiali:kiali:0.2.0:alpha:*:*:*:*:*:*

Informations

Vendor

kiali

Product

kiali

Version

0.2.0

Update

alpha

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-20278 2021-05-28 08h42 +00:00 An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used. When RBAC is enabled, Kiali assumes that some of the token validation is handled by the underlying cluster. When OpenID `implicit flow` is used with RBAC turned off, this token validation doesn't occur, and this allows a malicious user to bypass the authentication.
6.5
Medium
CVE-2020-1764 2020-03-26 10h16 +00:00 A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alter the Istio configuration.
8.6
High