Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: floragunn Search Guard Kibana Plugin 5.6.8-7, 6.x.y-12 Clear all filters
TI-2019-10091 CVE-2019-13422 · GHSA-6x28-cqmj-v2h4

Open redirect in floragunn Search Guard Kibana Plugin

Priority LOW 29

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00863 Published 2019-08-23 Fixed in 5.6.8-7, 6.x.y-12 CWE-601
TI-2019-10092 CVE-2019-13423 · GHSA-fxmc-8m6x-7f33

Improper authentication in floragunn Search Guard Kibana Plugin

Priority LOW 39

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following cond…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00677 Published 2019-08-23 Fixed in 5.6.8-7, 6.x.y-12 CWE-287