Lucene search
Veracode Vulnerability DatabaseVERACODE:22830HistoryMar 31, 2020 - 3:59 a.m.
Authentication Bypass
2020-03-3103:59:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.002
Percentile
59.1%
github.com/kiali/kiali is vulnerable to authentication bypass. The default signing key for JWT cookies is known in the source, allowing an attacker to forge credentials and use it to gain access to the application.
Related
osv
osv
CVE-2020-1764
2020-03-26 13:15:13
Hard coded cryptographic key in Kiali
2021-05-18 18:28:59
Hard coded cryptographic key in Kiali in github.com/kiali/kiali
2024-08-21 15:11:40
githubexploit
githubexploit
Exploit for Use of Hard-coded Credentials in Kiali
2020-07-06 13:59:52
redhatcve
redhatcve
CVE-2020-1764
2020-03-25 22:01:26
prion
prion
Hardcoded credentials
2020-03-26 13:15:00
github
github
Hard coded cryptographic key in Kiali
2021-05-18 18:28:59
redhat
redhat
cvelist
cvelist
CVE-2020-1764
2020-03-26 11:16:09
nvd
nvd
CVE-2020-1764
2020-03-26 13:15:13
cve
cve
CVE-2020-1764
2020-03-26 13:15:13
nessus
nessus
oraclelinux
oraclelinux