Unrated severityNVD Advisory· Published Mar 25, 2019· Updated Aug 4, 2024
CVE-2019-7610
CVE-2019-7610
Description
Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
4- access.redhat.com/errata/RHBA-2019:2824mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2019:2860mitrevendor-advisoryx_refsource_REDHAT
- discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077mitrex_refsource_MISC
- www.elastic.co/community/securitymitrex_refsource_MISC
News mentions
0No linked articles in our index yet.