CVE-2016-1000219

Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files

published June 16, 2017

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02039 · 81.0th percentile
Published
2017-06-16T21:00Z
EPSS history
Timeline
  • 16 JUN 21:00Z
    Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files
    cvelistv5