Read the docs
TI-2023-25172 Aliases CVE-2023-46671GHSA-6x3f-mgrr-9xvm

Kibana Insertion of Sensitive Information into Log File

Priority LOW 36CWE-532Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-532.

Summary

An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has released Kibana 8.11.1 which resolves this issue. The error message recorded in the log may contain account credentials for the kibana_system user, API Keys, and credentials of Kibana end-users. The issue occurs infrequently, only if an error is returned from an Elasticsearch cluster, in cases where there is user interaction and an unhealthy cluster (for example, when returning circuit breaker or no shard exceptions).

Why it matters now

EPSS 0.00656 51st percentileScored 2026-11-07
Fix Partial Kibana (Elastic): 8.11.1Red Hat: 2 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ElasticKibana8.0.0 to before 8.11.18.11.1Patch availableCNA
  • Kibana VendorElastic Affected 8.0.0 to before 8.11.1 Fixed in 8.11.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*8.0.0 to before 8.11.1VulnerableElastic
  • cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:* Versions 8.0.0 to before 8.11.1 Vulnerable ·Elastic

Remediation

  • Fix · CNA Kibana (Elastic) Fixed in 8.11.1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Logging Subsystem for Red Hat OpenShiftAffectedNo fix yet
Red Hat OpenShift Container Platform 3.11AffectedNo fix yet: Fix deferred

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-46671
  2. 2026-10-03 Alias added: GHSA-6x3f-mgrr-9xvm
  3. 2026-10-12 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2018-12328 Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the… CVSS 3.0CRITICAL 9.8
  • TI-2025-18692 Kibana arbitrary code execution via prototype pollution CVSS 3.1CRITICAL 9.8
  • TI-2020-05660 Code injection in Elastic Kibana CVSS 3.1HIGH 8.8
  • TI-2024-24803 Deserialization of untrusted data in Elastic Kibana CVSS 3.1CRITICAL 9.9
  • TI-2024-24800 Kibana arbitrary code execution via YAML deserialization CVSS 3.1CRITICAL 9.1
See all 188 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences