CVE-2021-20278: Medium severity kiali operator vulnerability
A vulnerability was found in kiali v1.30.0 when the authentication strategy OpenID is used. When RBAC is enabled, Kiali assumes that some of the token validation is handled by the underlying cluster. Hence, when OpenID implicit flow is used with RBAC turned off, this token validation doesn't occur and may allow a malicious user to bypass the authentication.
Other sources
An authentication bypass vulnerability was found in Kiali in versions before 1.31.0 when the authentication strategy OpenID is used. When RBAC is enabled, Kiali assumes that some of the token validation is handled by the underlying cluster. When OpenID implicit flow is used with RBAC turned off, this token validation doesn't occur, and this allows a malicious user to bypass the authentication.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-20278?
CVE-2021-20278 is an authentication bypass vulnerability found in Kiali versions before 1.31.0 when the authentication strategy OpenID is used.
How does CVE-2021-20278 affect Kiali?
CVE-2021-20278 affects Kiali versions before 1.31.0 when the authentication strategy OpenID is used.
What is the severity rating of CVE-2021-20278?
The severity rating of CVE-2021-20278 is medium with a CVSS score of 6.5.
How can I mitigate the vulnerability in Kiali?
To mitigate the vulnerability in Kiali, update to version 1.31.0 or newer.
Are there any references for CVE-2021-20278?
Yes, you can find more information about CVE-2021-20278 at the following references: - [Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1937171) - [Kiali Security Bulletin](https://kiali.io/news/security-bulletins/kiali-security-002/)