It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public view. Using this vulnerability, a malicious user with the ability to create connectors, could utilize these connectors to view limited HTTP response data on hosts accessible to the cluster.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP
    response data on internal hosts, which may be intentionally hidden from public view. Using this
    vulnerability, a malicious user with the ability to create connectors, could utilize these connectors to
    view limited HTTP response data on hosts accessible to the cluster. (CVE-2021-37939)

According to its self-reported version number, the Kibana application running on the remote host is 7.8.0 prior to 7.15.2. It is, therefore, affected by : 

- Path Traversal on Windows operating systems specifically (CVE-2021-37938)

- Information Disclosure in Kibana's JIRA connector & IBM Resilient connector (CVE-2021-37939)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
421796	SCA: security update for kibana (GHSA-hp5f-qqrw-c8gj)	Tenable Cloud Security	SCA Checks	low
421796	SCA: security update for kibana (GHSA-hp5f-qqrw-c8gj)	Tenable Self-Hosted Container Security	SCA Checks	low
113532	Kibana 7.8.0 < 7.15.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium

Detections

Analytics

CVE-2021-37939

low

Tenable Plugins

low

low

medium