PT-2017-18335
CVE-2017-8443
·
تاريخ النشر
2017-06-30
·
تاريخ التحديث
2020-10-19
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Kibana X-Pack security versions prior to 5.4.3
Description
The issue allows an attacker to craft a Kibana URL that could redirect a user to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar, potentially exposing them to untrusted parties or logging them into the Kibana access logs.
Recommendations
For versions prior to 5.4.3, update to version 5.4.3 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾