CVE-2020-1762

highpriority · track · 34EPSS 0.012 · 67 %ileEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.15% (67th) EPSS

CVSS 7.5 · high

Is it mine?

8 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · osv · nvd

EPSS · scored 2026-10-27

An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedjaeger-0:v1.13.1.redhat6-1.el7.src as a component of Red Hat OpenShift Service Mesh 1.0redhat_csaf
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972
Fixedjaeger-0:v1.13.1.redhat6-1.el7.x86_64 as a component of Red Hat OpenShift Service Mesh 1.0redhat_csaf
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972
Fixedkiali-0:v1.0.10.redhat1-1.el7.src as a component of Red Hat OpenShift Service Mesh 1.0redhat_csaf
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972
Fixedkiali-0:v1.0.10.redhat1-1.el7.x86_64 as a component of Red Hat OpenShift Service Mesh 1.0redhat_csaf
The OpenShift Service Mesh release notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.3/service_mesh/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2020:0972

cvss

Technical severity, 0–10. One row per scoring source.

8.6

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 4.7

v3.17highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Hsecondary · ENISA EU

v3.17highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Hsecondary · secalert@redhat.com USexploitability 2.2 · impact 4.7

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Hsecondary · OSV

v3.17.9highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:Hsecondary · Red Hat Product Security US

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-384USprimaryCWE-613USprimaryCWE-295USCWE-384USCWE-565USCWE-613US

affected products (8)

Products and version ranges known to be affected.

[Kiali] kiali0.4.0, → 1.15.1enisa_euvdEU
kiali kiali0.4.0 → 1.15.1nvdUScpe:2.3:a:kiali:kiali:*:*:*:*:*:*:*:*
redhat openshift service mesh= 1.0nvdUScpe:2.3:a:redhat:openshift_service_mesh:*:*:*:*:*:*:*:*
Go github.com/kiali/kiali0.4.0 → 1.15.1osvUSpkg:golang/github.com/kiali/kiali
jaeger-0:v1.13.1.redhat6-1.el7.src as a component of Red Hat OpenShift Service Mesh 1.0all versionsfixedredhat_csafUS
jaeger-0:v1.13.1.redhat6-1.el7.x86_64 as a component of Red Hat OpenShift Service Mesh 1.0all versionsfixedredhat_csafUS
kiali-0:v1.0.10.redhat1-1.el7.src as a component of Red Hat OpenShift Service Mesh 1.0all versionsfixedredhat_csafUS
kiali-0:v1.0.10.redhat1-1.el7.x86_64 as a component of Red Hat OpenShift Service Mesh 1.0all versionsfixedredhat_csafUS

advisories (3)

Vendor and ecosystem advisories describing this.

RHSA-2020:0972Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.10 Jaeger and Kiali security update2020-03-25csaf · redhat_csafUS
An update for Jaeger and Kiali is now available for Openshift Service Mesh 1.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
GHSA-465w-gg5p-85c9Insufficient Session Expiration in Kiali2021-05-18ghsa · osvUS
An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gaining privileges to view and alter the Istio configuration.
GO-2022-0626Insufficient Session Expiration in Kiali in github.com/kiali/kiali2024-08-21vendor · osvUS
Insufficient Session Expiration in Kiali in github.com/kiali/kiali

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd osv nvd redhat_csaf NVD CVE.org MITRE

published 2020-04-27modified 2026-06-17

related (1,317)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-102489US	critical9.8OT critical	1.96% (80th)	KEV	2026-09-30
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to ver…
CVE-2018-11714US	critical9.8	67.1% (99th)	Exploit	2018-06-04
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. T…
CVE-2018-18925US	critical9.8	31.1% (98th)	Exploit	2018-11-04
Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go.…
CVE-2014-2595US	critical9.8	16.9% (97th)	Exploit	2020-02-12
Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string.
CVE-2017-12965US	critical9.8	15.7% (97th)	Exploit	2017-08-23
Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

+1312 more

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan