Описание
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
A flaw was found in Kibana. A high-privileged user, allowed to create custom osquery packs, could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Logging Subsystem for Red Hat OpenShift | openshift-logging/cluster-logging-rhel8-operator | Under investigation | ||
| Logging Subsystem for Red Hat OpenShift | openshift-logging/elasticsearch-rhel8-operator | Under investigation | ||
| Logging Subsystem for Red Hat OpenShift | openshift-logging/kibana6-rhel8 | Under investigation | ||
| Red Hat OpenShift Container Platform 3.11 | kibana | Not affected | ||
| Red Hat OpenShift Container Platform 3.11 | openshift3/ose-logging-kibana5 | Under investigation | ||
| Red Hat OpenStack Platform 16.1 | puppet-kibana3 | Under investigation | ||
| Red Hat OpenStack Platform 16.2 | puppet-kibana3 | Under investigation |
Показывать по
Дополнительная информация
Статус:
EPSS
4.9 Medium
CVSS3
Связанные уязвимости
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
A high-privileged user, allowed to create custom osquery packs 17 coul ...
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
EPSS
4.9 Medium
CVSS3