Test Kennung:	1.3.6.1.4.1.25623.1.0.112544
Kategorie:	Web application abuses
Titel:	Elastic Kibana 4.0 <= 4.6 / 5.0 <= 5.6.12 / 6.0 <= 6.4.2 Credential Exposure Vulnerability (Linux)
Zusammenfassung:	Kibana is prone to an information disclosure vulnerability.
Beschreibung:	Summary: Kibana is prone to an information disclosure vulnerability. Vulnerability Insight: Affected versions of Kibana contain an error in the way authorization credentials are used when generating PDF reports. If a report requests external resources plaintext credentials are included in the HTTP request that could be recovered by an external resource provider. Vulnerability Impact: Successful exploitation would allow an attacker to obtain user authentication credentials (i.e., Kibana username and password in reversible hashed format). Affected Software/OS: Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2. Solution: Update to version 5.6.13 or 6.4.3 respectively. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-17245
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.