Unrated severityNVD Advisory· Published Dec 20, 2018· Updated Aug 5, 2024

CVE-2018-17245

Description

Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PDF reports. If a report requests external resources plaintext credentials are included in the HTTP request that could be recovered by an external resource provider.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Elastic/Kibanallm-fuzzy2 versions
>=4.0, <=4.6, >=5.0, <=5.6.12, >=6.0, <=6.4.2+ 1 more
- (no CPE)range: >=4.0, <=4.6, >=5.0, <=5.6.12, >=6.0, <=6.4.2
- (no CPE)range: 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2

Patches

Vulnerability mechanics

References

discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594mitrex_refsource_MISC
www.elastic.co/community/securitymitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000