CVE-2019-10452: Cleartext Storage of Sensitive Information

Jenkins View26 Test-Reporting Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

Elasticsearch X-Pack and Reporting Plugin Information Disclosure Vulnerability

Elasticsearch X-Pack is a Dutch Elasticsearch company Elastic Stack log analysis system extension. reporting is a plug-in application in which it can also be used independently. A security vulnerability exists in the Reporting feature in Elasticsearch X-Pack versions prior to 5.5.2 and Reporting...

Security feature bypass

The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...

PT-2017-18338

Name of the Vulnerable Software and Affected Versions X-Pack versions prior to 5.5.2 X-Pack standalone Reporting plugin versions prior to 2.4.6 Description The issue allows a user with the reporting user role to execute a report with the permissions of another reporting user, potentially gaining...

Kibana Reporting Plugin Cross-Site Request Forgery Vulnerability

Kibana is an open source data visualization plugin for Elasticsearch. A cross-site request forgery vulnerability exists in the Kibana Reporting plugin, which allows an attacker to generate redundant reports by tricking authenticated Kibana users into visiting specially designed pages...

CVE-2016-1000218

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page...

CVE-2016-1000218

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page...

CVE-2016-1000218

Kibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an attacker to generate superfluous reports whenever an authenticated Kibana user navigates to a specially-crafted page...

CVE-2016-1000218

The connected documents indicate a CSRF vulnerability in Elastic Kibana Reporting plugin for Kibana, version 2.4.0. The issue allows an authenticated user to trigger generation of redundant reports when visiting a specially crafted page. The root cause is a CSRF weakness in the Reporting plugin; ...

PT-2017-7669

Name of the Vulnerable Software and Affected Versions Kibana Reporting plugin version 2.4.0 Description The issue allows an attacker to generate unnecessary reports when an authenticated Kibana user visits a specially crafted page, due to a CSRF vulnerability. Recommendations For Kibana Reporting...

Reporting Plugin- Cross-site scripting error

Our e-security found the following error for the Reporting plugin: Number System/Location Defect Type Status R2 Reporting Plugin Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies, which may be used to...

Reporting Plugin- Cross-site scripting error

Our e-security found the following error for the Reporting plugin: Number System/Location Defect Type Status R2 Reporting Plugin Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies, which may be used to...

Reporting Plugin- Cross-site scripting error

Our e-security found the following error for the Reporting plugin: Number System/Location Defect Type Status R2 Reporting Plugin Client-side Attacks: Cross-site Scripting Open Description Security Risk: It is possible to steal or manipulate customer session and cookies, which may be used to...