CVE-2020-1764

A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alter the Istio configuration.

CVSS v3 8.6 HIGH
CVSS v2.0 7.5 HIGH

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764	Issue Tracking Mitigation Third Party Advisory
https://kiali.io/news/security-bulletins/kiali-security-001/	Exploit Mitigation Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764	Issue Tracking Mitigation Third Party Advisory
https://kiali.io/news/security-bulletins/kiali-security-001/	Exploit Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:kiali:kiali:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 05:11

Type	Values Removed	Values Added
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764 - Issue Tracking, Mitigation, Third Party Advisory~~	() https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764 - Issue Tracking, Mitigation, Third Party Advisory
References	~~() https://kiali.io/news/security-bulletins/kiali-security-001/ - Exploit, Mitigation, Vendor Advisory~~	() https://kiali.io/news/security-bulletins/kiali-security-001/ - Exploit, Mitigation, Vendor Advisory

Information

Published : 2020-03-26 13:15

Updated : 2024-11-21 05:11

NVD link : CVE-2020-1764

Mitre link : CVE-2020-1764

CVE.ORG link : CVE-2020-1764

JSON object : View

Products Affected

redhat

openshift_service_mesh

kiali

kiali

CWE

CWE-321

Use of Hard-coded Cryptographic Key

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2020-1764", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 3.9}]}, "published": "2020-03-26T13:15:13.203", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764", "tags": ["Issue Tracking", "Mitigation", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "https://kiali.io/news/security-bulletins/kiali-security-001/", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764", "tags": ["Issue Tracking", "Mitigation", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://kiali.io/news/security-bulletins/kiali-security-001/", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-321"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alter the Istio configuration."}, {"lang": "es", "value": "Se detect\u00f3 una vulnerabilidad de clave criptogr\u00e1fica embebida en el archivo de configuraci\u00f3n predeterminado en Kiali, todas las versiones anteriores a 1.15.1. Un atacante remoto podr\u00eda abusar de este fallo mediante la creaci\u00f3n de sus propios tokens firmados JWT y omisi\u00f3n de los mecanismos de autenticaci\u00f3n de Kiali, posiblemente obteniendo privilegios para visualizar y alterar la configuraci\u00f3n de Istio."}], "lastModified": "2024-11-21T05:11:20.277", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kiali:kiali:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73730DE8-613B-4050-8DDF-8240F7A2D0B8", "versionEndExcluding": "1.15.1"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "732F14CE-7994-4DD2-A28B-AE9E79826C01"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}