CVE-2020-1764
HIGH8.6EPSS 6.1%Hard coded cryptographic key in Kiali in github.com/kiali/kiali
發布日:2021/5/18修改日:2026/3/3
描述
Hard coded cryptographic key in Kiali in github.com/kiali/kiali
受影響套件(2)
- Go/github.com/kiali/kialifrom 0, < 1.15.1
- Go/github.com/kiali/kialifrom 0, < 1.15.1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH8.6 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H |
參考連結(10)
- ADVISORYhttps://github.com/advisories/GHSA-64rh-r86q-75ff
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-1764
- WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=1810383
- WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764
- WEBhttps://github.com/jpts/cve-2020-1764-poc
- WEBhttps://github.com/kiali/kiali/commit/93f5cd0b6698e8fe8772afb8f35816f6c086aef1
- WEBhttps://github.com/kiali/kiali/commit/ac7bd6c7ddb2e01356e21d360dd1c718a90706ad
- WEBhttps://github.com/kiali/kiali/commit/ce48af57113c805a25179aaab1a0fac2fb93653f
- WEBhttps://github.com/kiali/kiali/commit/faed1f5f90efae3df9fd6fb793f00ccc242b3a96
- WEBhttps://kiali.io/news/security-bulletins/kiali-security-001