high7.3
CVE-2020-8595
Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass.
Impact
Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path matching logic can allow unauthorized access to HTTP paths even if they are configured to be only accessed after presenting a valid JWT token. For example, an attacker can add a ? or # character to a URI that would otherwise satisfy an exact-path match.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Istio | Istio | from 1.3 through 1.3.7 from 1.4.0 through 1.4.3 |
| Redhat | Openshift Service Mesh | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2020:0477
- https://access.redhat.com/security/cve/cve-2020-8595
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-8595
- https://github.com/istio/istio/commits/master
- https://istio.io/news/security/
- https://istio.io/news/security/istio-security-2020-001/
- https://access.redhat.com/errata/RHSA-2020:0477
- https://access.redhat.com/security/cve/cve-2020-8595
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-8595
- https://github.com/istio/istio/commits/master
- https://istio.io/news/security/
- https://istio.io/news/security/istio-security-2020-001/