Red Hat Security Advisory

RHSA-2019:2860

OpenShift Container Platform 4.1.18 security update

Released 2019-09-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.1 kibana-5.6.16-2.el7

Fixes 3 records

TI-2019-05363 CVE-2019-7609 · GHSA-cp8f-5jp9-rqmh

Code injection in Elastic Kibana

CRITICAL 100KEV

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.95338 Published 2019-03-25 Fixed CWE-94

TI-2019-05364 CVE-2019-7610 · GHSA-rrx3-4wcg-f297

Code injection in Elastic Kibana

MEDIUM 45

Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger.

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.03894 Published 2019-03-25 Fixed in 6.6.1 CWE-94

TI-2019-05362 CVE-2019-7608 · GHSA-24qm-h8fv-cv5c

Cross-site scripting in Elastic Kibana

LOW 30

Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01333 Published 2019-03-25 Fixed CWE-79