CVE-2019-13423

CVE-2019-13423 describes an impersonation vulnerability in floragunn Search Guard Kibana Plugin, affecting versions before 5.6.8-7 and before 6.x.y-12. The issue arises when an authenticated Kibana user presents incorrect credentials under a specific configuration: Kibana uses SSO (Kerberos, JWT,...

PT-2019-10166

Name of the Vulnerable Software and Affected Versions: floragunn Search Guard plugin for Kibana versions prior to 6.x-16 Description: The issue allows URL injection for login redirects on the login page when basePath is set. Recommendations: For versions prior to 6.x-16, update to version 6.x-16 ...