CVE-2017-8443

Name of the Vulnerable Software and Affected Versions Kibana X-Pack security versions prior to 5.4.3

Description The issue allows an attacker to craft a Kibana URL that could redirect a user to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar, potentially exposing them to untrusted parties or logging them into the Kibana access logs.

Recommendations For versions prior to 5.4.3, update to version 5.4.3 or later to resolve the issue.