(RHSA-2016:1836) Moderate: Red Hat OpenShift Enterprise Kibana security update

OpenShift Enterprise by Red Hat is the company’s cloud computing Platform-
as-a-Service (PaaS) solution designed for on-premise or private cloud
deployments.

Security Fix(es):

• A flaw was found in Kibana’s logging functionality. If custom logging
  output was configured in Kibana, private user data could be written to the
  Kibana log files. A system attacker could use this data to hijack sessions
  of other users when using Kibana behind some form of authentication such as
  Shield.

• A cross-site scripting (XSS) flaw was found in Kibana. A remote attacker
  could use this flaw to inject arbitrary web script into pages served to
  other users.