According to its self-reported version number, the Kibana application running on the remote host is prior to 5.6.15 or 6.x prior to 6.6.1. It is, therefore, affected by the following vulnerabilities:

 - A cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users. (CVE-2019-7608)

 - An arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. (CVE-2019-7609)

 - An arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. (CVE-2019-7610)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2860 advisory.

  - kibana: Cross-site scripting vulnerability permits perform destructive actions on behalf of other Kibana     users (CVE-2019-7608)

  - kibana: Arbitrary code execution flaw in the Timelion visualizer (CVE-2019-7609)

  - kibana: Audit logging Remote Code Execution issue (CVE-2019-7610)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the kibana package has been released.

Kibana versions before 5.6.15 and 6.6.1 have the following vulnerabilities:

  - A cross-site scripting (XSS) vulnerability that could     allow an attacker to obtain sensitive information from     or perform destructive actions on behalf of other     Kibana users. (CVE-2019-7608)

  - An arbitrary code execution flaw in the Timelion     visualizer. An attacker with access to the Timelion     application could send a request that will attempt to     execute javascript code. This could possibly lead to an     attacker executing arbitrary commands with permissions     of the Kibana process on the host system. (CVE-2019-7609)

  - An arbitrary code execution flaw in the security audit     logger. If a Kibana instance has the setting     xpack.security.audit.enabled set to true, an attacker     could send a request that will attempt to execute     javascript code. This could possibly lead to an attacker     executing arbitrary commands with permissions of the     Kibana process on the host system. (CVE-2019-7610)

Kibana versions before 5.6.15 and 6.6.1 have the following vulnerabilities:

- A cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users. (CVE-2019-7608)
 - An arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. (CVE-2019-7609)
 - An arbitrary code execution flaw in the security audit logger. If a Kibana instance has the setting xpack.security.audit.enabled set to true, an attacker could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system. (CVE-2019-7610)

ID	Name	Product	Family	Published	Updated	Severity
98982	Kibana 6.x < 6.6.1 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	3/5/2020	3/14/2023	critical
98981	Kibana < 5.6.15 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	3/5/2020	3/14/2023	critical
129396	RHEL 7 : OpenShift Container Platform 4.1.18 (RHSA-2019:2860)	Nessus	Red Hat Local Security Checks	9/27/2019	4/27/2024	critical
202879	Photon OS 3.0: Kibana PHSA-2019-3.0-0012	Nessus	PhotonOS Local Security Checks	7/22/2024	7/24/2024	critical
202806	Photon OS 2.0: Kibana PHSA-2019-2.0-0149	Nessus	PhotonOS Local Security Checks	7/22/2024	7/23/2024	critical
122589	Kibana ESA-2019-01, ESA-2019-02, ESA-2019-03	Nessus	CGI abuses	3/4/2019	6/17/2024	critical
701234	Kibana 5.x < 5.6.15 / 6.x < 6.6.1 Multiple Vulnerabilities	Nessus Network Monitor	Generic	10/24/2019	10/24/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical