Lucene search

K
nessusThis script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_113536
HistoryJan 11, 2023 - 12:00 a.m.

Kibana 6.7.0 < 7.7.0 Prototype Pollution

2023-01-1100:00:00
This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
5

According to its self-reported version number, the Kibana application running on the remote host is 6.7.0 prior to 7.0.0. It is, therefore, affected by :

  • A Prototype Pollution in Upgrade Assistant (CVE-2020-7012)

  • A Prototype Pollution in TSVB visualizartion (CVE-2020-7013)

Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.

No source data
VendorProductVersionCPE
elasticsearchkibana*cpe:2.3:a:elasticsearch:kibana:*:*:*:*:*:*:*:*