CVE-2020-8595
istio: unauthorised access to JWT protected HTTP path
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path matching logic can allow unauthorized access to HTTP paths even if they are configured to be only accessed after presenting a valid JWT token. For example, an attacker can add a ? or # character to a URI that would otherwise satisfy an exact-path match.
Las versiones Istio 1.2.10 (End of Life) y anteriores, 1.3 a 1.3.7, y 1.4 a 1.4.3 permiten la omisión de autenticación. La lógica de coincidencia de ruta exacta de la Política de autenticación puede permitir el acceso no autorizado a rutas HTTP incluso si están configuradas para acceder solo después de presentar un token JWT válido. Por ejemplo, un atacante puede agregar un? o # carácter a un URI que de otro modo satisfaría una coincidencia de ruta exacta.
An unauthorized access vulnerability was found in Istio in the servicemesh-proxy. An attacker can use this flaw to specify an HTTP path and gain unauthorized access, even if the path is configured to only be accessed with a valid JSON Web Token (JWT).
CVSS Scores
SSVC
- Decision:-
Timeline
- 2020-02-03 CVE Reserved
- 2020-02-12 CVE Published
- 2024-06-07 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-285: Improper Authorization
- CWE-287: Improper Authentication
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| https://access.redhat.com/security/cve/cve-2020-8595 | Mitigation | |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-8595 | Issue Tracking |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/istio/istio/commits/master | 2020-02-20 | |
| https://istio.io/news/security/istio-security-2020-001 | 2020-02-20 |
| URL | Date | SRC |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2020:0477 | 2020-02-20 | |
| https://istio.io/news/security | 2020-02-20 | |
| https://access.redhat.com/security/cve/CVE-2020-8595 | 2020-02-12 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1798247 | 2020-02-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Redhat Search vendor "Redhat" | Openshift Service Mesh Search vendor "Redhat" for product "Openshift Service Mesh" | 1.0 Search vendor "Redhat" for product "Openshift Service Mesh" and version "1.0" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux" | 8.0 Search vendor "Redhat" for product "Enterprise Linux" and version "8.0" | - |
Safe
|
| Istio Search vendor "Istio" | Istio Search vendor "Istio" for product "Istio" | >= 1.3 <= 1.3.7 Search vendor "Istio" for product "Istio" and version " >= 1.3 <= 1.3.7" | - |
Affected
| ||||||
| Istio Search vendor "Istio" | Istio Search vendor "Istio" for product "Istio" | >= 1.4.0 <= 1.4.3 Search vendor "Istio" for product "Istio" and version " >= 1.4.0 <= 1.4.3" | - |
Affected
| ||||||