CVE-2020-1764

Katalog CVE

CVSS 8.6 · High EPSS 3,5%

Kerentanan Use of Hard-coded Cryptographic Key pada kiali, redhat openshift service mesh. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alter the Istio configuration.

Rincian

Terbit di NVD

26 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-321: Use of Hard-coded Cryptographic Key
CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

3,5% peluang dieksploitasi; lebih tinggi dari 88,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://kiali.io/news/security-bulletins/kiali-security-001/ exploit · mitigasi · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764 issue tracking · mitigasi · advisory pihak ketiga