The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: elastic
Published: 2017-12-08T18:00:00
Updated: 2024-08-05T18:12:39.856Z
Reserved: 2017-07-20T00:00:00
Link: CVE-2017-11482
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-12-08T18:29:00.273
Modified: 2024-11-21T03:07:52.640
Link: CVE-2017-11482
Redhat