CVE-2017-8443
published 2017-06-30CVE-2017-8443: In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized…
PriorityP429medium6.5CVSS 3.0
AVNACLPRNUIRSUCHINAN
EPSS
1.10%
61.6th percentile
In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be viewed by untrusted parties or logged into the Kibana access logs.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| elastic | kibana | <= 5.4.2 | — |
| elastic | kibana_x-pack_security | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8379-8jj9-c2jj: In Kibana X-Pack security versions prior to 5
ghsa_unreviewed·2022-05-13
CVE-2017-8443 [MEDIUM] CWE-200 GHSA-8379-8jj9-c2jj: In Kibana X-Pack security versions prior to 5
In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be viewed by untrusted parties or logged into the Kibana access logs.
Red Hat
kibana: Crafted URLs can be used to trick users into disclosing their password
vendor_redhat·2017-06-30·CVSS 6.5
CVE-2017-8443 [MEDIUM] CWE-200 kibana: Crafted URLs can be used to trick users into disclosing their password
kibana: Crafted URLs can be used to trick users into disclosing their password
In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be viewed by untrusted parties or logged into the Kibana access logs.
Package: kibana (Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Operational Tools) - Not affected
Package: kibana (Red Hat OpenShift Enterprise 3) - Not affected
Package: kibana (Red Hat OpenStack Platform 8 (Liberty) Operational Tools) - Not affected
Package: kibana (Red Hat OpenStack Platform 9 (Mitaka) Operational Tools) - Not affected
No detection rules found.
2017-06-30
Published