An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used. When RBAC is enabled, Kiali assumes that some of the token validation is handled by the underlying cluster. When OpenID `implicit flow` is used with RBAC turned off, this token validation doesn't occur, and this allows a malicious user to bypass the authentication.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1937171 | Issue Tracking Patch Third Party Advisory |
| https://kiali.io/news/security-bulletins/kiali-security-002/ | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1937171 | Issue Tracking Patch Third Party Advisory |
| https://kiali.io/news/security-bulletins/kiali-security-002/ | Vendor Advisory |
Configurations
History
21 Nov 2024, 05:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1937171 - Issue Tracking, Patch, Third Party Advisory | |
| References | () https://kiali.io/news/security-bulletins/kiali-security-002/ - Vendor Advisory |
05 Aug 2022, 15:20
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 |
02 Jun 2021, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.8
v3 : 6.5 |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1937171 - Issue Tracking, Patch, Third Party Advisory | |
| References | (MISC) https://kiali.io/news/security-bulletins/kiali-security-002/ - Vendor Advisory | |
| CPE | cpe:2.3:a:kiali:kiali:*:*:*:*:*:*:*:* |
28 May 2021, 11:37
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-290 |
28 May 2021, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-05-28 11:15
Updated : 2024-11-21 05:46
NVD link : CVE-2021-20278
Mitre link : CVE-2021-20278
CVE.ORG link : CVE-2021-20278
JSON object : View
Products Affected
kiali
- kiali