Medium WID-SEC-2023-3128 1 CVE

Kibana: Schwachstelle ermöglicht Offenlegung von Informationen

Published Dec 12, 2023 · Updated Dec 12, 2023 · de-DE

Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann eine Schwachstelle in Kibana ausnutzen, um Informationen offenzulegen.

Product

Kibana ist ein Open Source Datenvisualisierungs-Plugin für Elasticsearch.

Vulnerabilities 1

High 8.0

CVE-2023-46675

Kibana Insertion of Sensitive Information into Log File

An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has released Kibana 8.11.2 which resolves this issue. The messages…

Elastic Kibana

Dec 13, 2023

Revision history

2023-12-12 #1
Initiale Fassung

References

Elasticsearch Security Advsiory ESA-2023-27 vom 2023-12-12
https://discuss.elastic.co/t/kibana-8-11-2-7-17-16-security-update-esa-2023-27/349182