Skip to content
OpenAdvisories

Package · Go

github.com/kiali/kiali

5 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.6
    CVE-2020-1764 Public exploit

    Hard coded cryptographic key in Kiali

    A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possib…