CVE-2020-8595 Auth bypass in n/a
Attackers can bypass JWT authentication in Istio by appending special characters to URIs, gaining unauthorized access to protected HTTP paths.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-8595?
CVE-2020-8595 is a high-severity authentication bypass vulnerability in n/a, published on 12 Feb 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path matching logic can allow unauthorized access to HTTP paths even if they are configured to be only accessed after presenting a valid JWT token. For example, an attacker can add a ? or # character to a URI that would otherwise satisfy an exact-path match.
Weakness: CWE-287
Which versions are affected by CVE-2020-8595?
It affects 2 products.
Linux distribution packages (1)
servicemesh-proxy Red Hat:service_mesh:1.0::el8 | All versions | 0:1.0.7-1.el8 |
Products include Istio Istio, Redhat Openshift Service Mesh.
How do I fix CVE-2020-8595?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-8595 being exploited?
There is no known exploitation of CVE-2020-8595 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2021-31921 Missing authorization in n/a
- CVE-2021-34824 Information disclosure in n/a
- CVE-2026-31837 Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.
- CVE-2021-39155 Authorization Policy Bypass Due to Case Insensitive Host Comparison
- CVE-2021-39156 Fragments in Path May Lead to Authorization Policy Bypass
Sources
Also known as GHSA-6mcc-fxc5-58cv, RHSA-2020:0477.