4858 matches found
Elasticsearch Cross-site Scripting (XSS) Vulnerability - Linux
Elasticsearch is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Elasticsearch < 1.6.1 Multiple Vulnerabilities - Linux
Elasticsearch is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:elasticsearch";...
search-guard in Elasticsearch 2.3 use-vulnerability warning-the black bar safety net
Reference content： http://kibana.logstash.es/content/elasticsearch/auth/searchguard-2.html https://groups.google.com/forum/! forum/search-guard https://github.com/floragunncom/search-guard This article is based on the following software versions, different versions may have slightly differences:...
Elasticsearch Cross-site Scripting (XSS) Vulnerability - Windows
Elasticsearch is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Elasticsearch < 1.6.1 Multiple Vulnerabilities - Windows
Elasticsearch is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:elasticsearch";...
Logstash Logs Sensitive Information
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials...
Skydive - An Open Source Real-Time Network Topology and Protocols Analyzer
Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure. Skydive agents collect topology informations and flows and forward them to a central agent for further analysis. Al...
Lightweight Lumberjack Log Indexer: LogZoom
LogZoom is a lightweight, Lumberjack-compliant log indexer based off the fine work of Hailo’s Logslam . It accepts the Lumberjack v2 protocol, which is currently supported by Elastic’s Filebeat . It was written with the intention of being a smaller, efficient, and more reliable replacement for...
Open Source Real Time Network Analyzer: skydive
Open Source Real Time Network Topology and Protocols Analyzer Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure. Skydive agents collect topology informations and flow...
Logstash 2.2.1 Elasticsearch Output Vulnerability
Logstash version 2.2.1 is vulnerable to a man in the middle attack when used with Elasticsearch output. In version 2.2.1, the config which enables SSL/TLS default has been disabled inadvertently, so a malicious user could access payload data sent via HTTP during the initial handshake. This has be...
Elasticsearch Kibana跨站请求伪造漏洞
No description provided by source...
Elasticsearch Kibana Cross-Site Request Forgery Vulnerability
Elasticsearch Kibana formerly known as elasticsearch-dashboard is a suite of open-source, browser-based analytics and search Elasticsearch dashboard tools from the Dutch company Elasticsearch. A cross-site request forgery vulnerability exists in Elasticsearch Kibana versions prior to 4.1.3 and...
CVE-2015-8131
Cross-site request forgery CSRF vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-8131
Elastic Kibana is affected by a Cross-site Request Forgery (CSRF) vulnerability. Affected versions are Kibana prior to 4.1.3 and 4.2.x prior to 4.2.1. The issue allows a remote attacker to hijack the authentication of unspecified victims via unknown vectors. The root cause is a CSRF flaw in Kiban...
CVE-2015-8131
Cross-site request forgery CSRF vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-8131
Cross-site request forgery CSRF vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-8131: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
PT-2015-7734
Name of the Vulnerable Software and Affected Versions Elasticsearch Kibana versions prior to 4.1.3 Elasticsearch Kibana versions 4.2.x prior to 4.2.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors...