Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5548
HistoryDec 11, 2017 - 2:36 a.m.

Open Redirects

2017-12-1102:36:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

38.3%

Kibana is vulnerable to open redirect attacks. The fix for CVE-2017-8451 was found to be incomplete, therefore when X-Pack is installed the open redirect in the login page remains.

CPENameOperatorVersion
kibanale6.0.0
kibanale5.6.4
kibanaeq5.1.1

0.001 Low

EPSS

Percentile

38.3%