GitHub Advisoryadvisory · Go

GHSA-ggjr-2f7v-vhq4 Kiali Authentication Bypass vulnerability

MEDIUM Published 2021-06-01 Modified 2022-08-11 Official page ↗
Aliases
CVE-2021-20278
Ecosystem
Go
Packages
github.com/kiali/kiali
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-287, CWE-290
Reviewed
2021-06-01

Affected packages

• Go github.com/kiali/kiali: < 1.31.0 → fixed in 1.31.0

Description

An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used. When RBAC is enabled, Kiali assumes that some of the token validation is handled by the underlying cluster. When OpenID `implicit flow` is used with RBAC turned off, this token validation doesn't occur, and this allows a malicious user to bypass the authentication.

Related

Alias · CVE (1)

  • CVE-2021-20278 An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used. vulnerability

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-290 Authentication Bypass by Spoofing weakness

References