Skip to content
OpenAdvisories
Unscored RHSA-2016:1836 2 CVEs

Red Hat Security Advisory: Red Hat OpenShift Enterprise Kibana security update

Published Sep 15, 2024 · Updated May 13, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · OpenShift 3 openshift:3.1::el7 kibana 0:4.1.11-1.el7
Red Hat · OpenShift 3 openshift:3.1::el7 kibana-debuginfo 0:4.1.11-1.el7
Red Hat · OpenShift 3 openshift:3.1::el7 openshift-elasticsearch-plugin 0:0.16.0.redhat_1-1.el7
Red Hat · OpenShift 3 openshift:3.2::el7 kibana 0:4.1.11-1.el7
Red Hat · OpenShift 3 openshift:3.2::el7 kibana-debuginfo 0:4.1.11-1.el7
Red Hat · OpenShift 3 openshift:3.2::el7 openshift-elasticsearch-plugin 0:0.16.0.redhat_1-1.el7

Vulnerabilities 2

  • Unscored —
    CVE-2016-1000219

    Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers cou…

  • Unscored —
    CVE-2016-1000220

    Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaSc…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1364389
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1364394
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1836.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-1000219
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-1000219
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-1000219
  • article
    https://www.elastic.co/community/security
  • report
    https://access.redhat.com/security/cve/CVE-2016-1000220
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-1000220
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-1000220