TI-2020-01707 CVE-2020-1764 · GHSA-64rh-r86q-75ff
Hard-coded credentials in Red Hat kiali
Priority MEDIUM 43
A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1.
[Kiali]
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
[Kiali] records in CISA KEVNo [Kiali] vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2020-01705 CVE-2020-1762 · GHSA-465w-gg5p-85c9
Session fixation in [Kiali] kiali
Priority MEDIUM 40
An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using tha…
TI-2021-03569 CVE-2021-20278 · GHSA-ggjr-2f7v-vhq4
Authentication bypass by spoofing in kiali
Priority LOW 30
An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used.
TI-2022-03631 CVE-2022-3962 · GHSA-6f4m-j56w-55c3
Kiali: error message spoofing in kiali ui
Priority LOW 21
A content spoofing vulnerability was found in Kiali.