EPSS
Percentile
67.9%
kiali uses spoofable user session. The attack is possible due to Insufficient JWT Session Expiration validation, leading to Session Fixation and privilege escalation.
access.redhat.com/errata/RHSA-2020:0972
access.redhat.com/security/cve/CVE-2020-1762
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1762
kiali.io/news/security-bulletins/kiali-security-001/