Vulnerability · Published May 28, 2021 · Assigned by redhat

CVE-2021-20278

Medium 6.5

In plain English

A medium-severity authentication bypass by spoofing in kiali. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.5Medium

Exploit odds (30 days)0.8%top 44.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy `OpenID` is used. When RBAC is enabled, Kiali assumes that some of the token validation is handled by the underlying cluster. When OpenID `implicit flow` is used with RBAC turned off, this token validation doesn't occur, and this allows a malicious user to bypass the authentication.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/kiali/kiali	1.31.0	GHSA-ggjr-2f7v-vhq4
Go	github.com/kiali/kiali	1.31.0	GO-2022-0700

Affected products (as reported)

Vendor	Product	Versions
n/a	kiali	kiali 1.31.0

Weakness: CWE-290

References

https://bugzilla.redhat.com/show_bug.cgi?id=1937171 x_refsource_MISC
https://kiali.io/news/security-bulletins/kiali-security-002/ x_refsource_MISC