Skip to content
OpenAdvisories
High WID-SEC-2023-2913 1 CVE

Kibana: Schwachstelle ermöglicht Offenlegung von Informationen

Published Nov 14, 2023 · Updated Nov 14, 2023 · de-DE

Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um Informationen offenzulegen.

Product

Kibana ist ein Open Source Datenvisualisierungs-Plugin für Elasticsearch.

Vulnerabilities 1

  • High 8.0
    CVE-2023-46671

    Kibana Insertion of Sensitive Information into Log File

    An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has released Kibana 8.11.1 which resolves this issue. The error message recorded in the log may contain account credentials for t…

    Elastic Kibana

Revision history

  1. #1

    Initiale Fassung

References