Lucene search

GoogleOSV:GO-2022-0626

HistoryAug 21, 2024 - 3:11 p.m.

Insufficient Session Expiration in Kiali in github.com/kiali/kiali

2024-08-2115:11:40

Google

osv.dev

session expiration

kiali

github

software

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

AI Score

7.1

Confidence

Low

JSON

Insufficient Session Expiration in Kiali in github.com/kiali/kiali

References

bugzilla.redhat.com/show_bug.cgi?id=1810387

bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762

github.com/advisories/GHSA-465w-gg5p-85c9

github.com/kiali/kiali/commit/93f5cd0b6698e8fe8772afb8f35816f6c086aef1

github.com/kiali/kiali/commit/c91a0949683976f621cca213c1193831d63b381c

kiali.io/news/security-bulletins/kiali-security-001

nvd.nist.gov/vuln/detail/CVE-2020-1762

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

AI Score

7.1

Confidence

Low

JSON

Related for OSV:GO-2022-0626