CVE-2017-8439

Mô tả

Tham khảo

• discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952 · Mitigation
• elastic.co/blog/kibana-5-4-1-and-5-3-3-released · Release Notes
• elastic.co/community/security · Vendor Advisory

Lỗ hổng khác của kibana

• CVE-2026-102412TRUNG BÌNH 6.5Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constraine…
• CVE-2026-102410TRUNG BÌNH 4.3Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (C…
• CVE-2026-102406CAO 8.8Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant"…
• CVE-2026-94400TRUNG BÌNH 6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)
• CVE-2026-78583CAO 8.1Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153). Elasticsearch cluster …