Security Advisory

CVE-2018-3819

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-30 20:00:00

Last updated 2024-08-05 04:57:22

Assigner elastic

CVSS score not scored

State PUBLISHED

Description

The fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions before 6.1.3 and 5.6.7 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitrary website.

← Browse all CVEs View on cve.org ↗