Описание
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
A flaw was found in Kibana. A high-privileged user, allowed to create custom osquery packs, could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Logging Subsystem for Red Hat OpenShift | openshift-logging/cluster-logging-rhel9-operator | Under investigation | ||
| Logging Subsystem for Red Hat OpenShift | openshift-logging/elasticsearch-rhel8-operator | Under investigation | ||
| Logging Subsystem for Red Hat OpenShift | openshift-logging/kibana6-rhel8 | Under investigation | ||
| Red Hat OpenShift Container Platform 3.11 | kibana | Not affected | ||
| Red Hat OpenShift Container Platform 3.11 | openshift3/ose-logging-kibana5 | Under investigation | ||
| Red Hat OpenStack Platform 16.1 | puppet-kibana3 | Under investigation | ||
| Red Hat OpenStack Platform 16.2 | puppet-kibana3 | Under investigation |
Показывать по
10
Дополнительная информация
Статус:
Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=2292364kibana: uncontrolled resource consumption
EPSS
Процентиль: 76%
0.01764
Низкий
4.9 Medium
CVSS3
Связанные уязвимости
CVSS3: 4.9
nvd
около 2 лет назад
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
CVSS3: 4.9
github
около 2 лет назад
A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
EPSS
Процентиль: 76%
0.01764
Низкий
4.9 Medium
CVSS3