CVE-2017-11482CWE-601

The Kibana fix for CVE-2017-8451 was found to be incomplete

published December 8, 2017

CVSS
—
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00738 · 53.8th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2017-12-08T18:00Z
EPSS history
Timeline
  • 08 DEC 18:00Z
    The Kibana fix for CVE-2017-8451 was found to be incomplete
    cvelistv5