CVE-2020-1762 - Vulnerability Details - OpenCVE

An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.01304.

Key SSVC decision points have not yet been added.

Vendors	Products
Kiali	Kiali
Redhat	Openshift Service Mesh Service Mesh

Configuration 1 [-]

cpe:2.3:a:kiali:kiali:*:*:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*

Package	CPE	Advisory	Released Date
Openshift Service Mesh 1.0
jaeger-0:v1.13.1.redhat6-1.el7	cpe:/a:redhat:service_mesh:1.0::el7	RHSA-2020:0972	2020-03-25T00:00:00Z
kiali-0:v1.0.10.redhat1-1.el7	cpe:/a:redhat:service_mesh:1.0::el7	RHSA-2020:0972	2020-03-25T00:00:00Z

No data.

References

Link	Providers
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762
https://kiali.io/news/security-bulletins/kiali-security-001/
https://nvd.nist.gov/vuln/detail/CVE-2020-1762
https://www.cve.org/CVERecord?id=CVE-2020-1762

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2020-04-27T20:41:37

Updated: 2024-08-04T06:46:30.907Z

Reserved: 2019-11-27T00:00:00

Link: CVE-2020-1762

Vulnrichment

No data.

NVD

Status : Modified

Published: 2020-04-27T21:15:13.717

Modified: 2024-11-21T05:11:19.983

Link: CVE-2020-1762

Redhat

Severity : Moderate

Publid Date: 2020-03-25T18:00:00Z

Links: CVE-2020-1762 - Bugzilla

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "kiali", "vendor": "[Kiali]", "versions": [{"status": "affected", "version": ">= 0.4.0, < 1.15.1"}]}], "descriptions": [{"lang": "en", "value": "An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-613", "description": "CWE-613", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-384", "description": "CWE-384", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2020-04-27T20:41:37", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://kiali.io/news/security-bulletins/kiali-security-001/"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secalert@redhat.com", "ID": "CVE-2020-1762", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "kiali", "version": {"version_data": [{"version_value": ">= 0.4.0, < 1.15.1"}]}}]}, "vendor_name": "[Kiali]"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration."}]}, "impact": {"cvss": [[{"vectorString": "7.0/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.0"}]]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-613"}]}, {"description": [{"lang": "eng", "value": "CWE-384"}]}]}, "references": {"reference_data": [{"name": "https://kiali.io/news/security-bulletins/kiali-security-001/", "refsource": "MISC", "url": "https://kiali.io/news/security-bulletins/kiali-security-001/"}, {"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762", "refsource": "CONFIRM", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T06:46:30.907Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://kiali.io/news/security-bulletins/kiali-security-001/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762"}]}]}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2020-1762", "datePublished": "2020-04-27T20:41:37", "dateReserved": "2019-11-27T00:00:00", "dateUpdated": "2024-08-04T06:46:30.907Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kiali:kiali:*:*:*:*:*:*:*:*", "matchCriteriaId": "93849A76-310D-4419-A7E2-7834C6768A27", "versionEndExcluding": "1.15.1", "versionStartIncluding": "0.4.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:redhat:openshift_service_mesh:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "732F14CE-7994-4DD2-A28B-AE9E79826C01", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad de comprobaci\u00f3n de JWT insuficiente en Kiali versiones 0.4.0 hasta la versi\u00f3n 1.15.0, y fue corregido en la versi\u00f3n 1.15.1, en la que un atacante remoto podr\u00eda abusar de este fallo al robar una cookie JWT v\u00e1lida y usarla para falsificar una sesi\u00f3n de usuario, posiblemente obteniendo privilegios para visualizar y alterar la configuraci\u00f3n de Istio."}], "id": "CVE-2020-1762", "lastModified": "2024-11-21T05:11:19.983", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 4.7, "source": "secalert@redhat.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-04-27T21:15:13.717", "references": [{"source": "secalert@redhat.com", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762"}, {"source": "secalert@redhat.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://kiali.io/news/security-bulletins/kiali-security-001/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://kiali.io/news/security-bulletins/kiali-security-001/"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-384"}, {"lang": "en", "value": "CWE-613"}], "source": "secalert@redhat.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-384"}, {"lang": "en", "value": "CWE-613"}], "source": "nvd@nist.gov", "type": "Primary"}]}