source code changes.</p></a></div><h2 id=security-update>Security Update</h2><ul><li><strong>ISTIO-SECURITY-2020-004</strong> Istio uses a hard coded <code>signing_key</code> for Kiali.</li></ul><p><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1764">CVE-2020-1764</a></strong>: Istio uses a default <code>signing key</code> to install Kiali. This can allow an attacker with access to Kiali to bypass authentication and gain administrative privileges over Istio.
In addition, another CV