Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q36m-wm9g-699v

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.

Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.

EPSS

Процентиль: 71%
0.00678
Низкий

7.5 High

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 4.8
redhat
больше 9 лет назад

Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.

CVSS3: 7.5
nvd
больше 8 лет назад

Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.

CVSS3: 7.5
debian
больше 8 лет назад

Kibana before 4.5.4 and 4.1.11 when a custom output is configured for ...

EPSS

Процентиль: 71%
0.00678
Низкий

7.5 High

CVSS3

Дефекты

CWE-285