Lucene search
GoogleOSV:CVE-2021-37939HistoryNov 18, 2021 - 4:15 p.m.
CVE-2021-37939
2021-11-1816:15:08
Google
osv.dev
3
It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public view. Using this vulnerability, a malicious user with the ability to create connectors, could utilize these connectors to view limited HTTP response data on hosts accessible to the cluster.
Related
redhatcve
redhatcve
CVE-2021-37939
2021-11-29 05:42:48
prion
prion
Design/Logic Flaw
2021-11-18 16:15:00
nvd
nvd
CVE-2021-37939
2021-11-18 16:15:08
openvas
openvas
Elastic Kibana Information Disclosure Vulnerability (ESA-2021-27)
2021-11-17 00:00:00
osv
osv
Kibana Sensitive Data Disclosure
2022-05-24 22:28:42
cve
cve
CVE-2021-37939
2021-11-18 16:15:08
cvelist
cvelist
CVE-2021-37939
2021-11-18 15:09:27
github
github
Kibana Sensitive Data Disclosure
2022-05-24 22:28:42
nessus
nessus
Kibana 7.8.0 < 7.15.2 Multiple Vulnerabilities
2023-01-11 00:00:00