CVE-2020-27816

The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link kibana console to different one, created based on the new CR for the new kibana resource. This could lead to an...

PT-2020-16803

Name of the Vulnerable Software and Affected Versions elasticsearch-operator-container versions prior to 4.7 Description The issue arises from the elasticsearch-operator's failure to validate the namespace where the kibana logging resource is created. This allows for the potential replacement of...

Red Hat OpenShift Elasticsearch-operator Input Validation Error Vulnerability

Red Hat OpenShift Elasticsearch-operator is a software from Red Hat USA for use in OpenShift to support interaction with Elasticsearch. A security vulnerability exists in elasticsearch-operator-container versions prior to 4.7 that stems from not validating the namespace in which a kibana logging...

IBM Cognos Analytics Security Restriction Bypass Vulnerability

IBM Cognos Analytics formerly known as Cognos BI is a suite of business intelligence software from the American company IBM. The software includes reports, dashboards, and scorecards, and can be used to help companies adjust their decision-making by analyzing key factors and key stakeholders, etc...