DeutschShown in its original language — a full translation is planned for a future version.
Elasticsearch und Kibana: Mehrere Schwachstellen
view advisory published 2021-09-01
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen und um Administratorrechte zu erlangen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37937US | high8.8 | — | ||
An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be… | ||||
| CVE-2021-22151US | medium4.3 | — | ||
It was discovered that Kibana was not validating a user supplied path, which would load .pbf files. Because of this, a malicious user could arbitrarily traverse the Kibana host to… | ||||
| CVE-2021-22150US | high7.2 | — | ||
It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in a… | ||||
| CVE-2021-37936US | medium5.4 | — | ||
It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticse… | ||||
| CVE-2021-3672US | medium5.6 | — | ||
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might pot… | ||||
| CVE-2021-22930US | critical9.8 | — | ||
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. | ||||
| CVE-2021-22939US | medium5.3 | — | ||
If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired… | ||||
| CVE-2021-22931US | critical9.8 | — | ||
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name S… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2021-3623 vom 2021-09-22external
- Red Hat Security Advisory RHSA-2021:3638 vom 2021-09-22external
- Red Hat Security Advisory RHSA-2021:3639 vom 2021-09-22external
- Red Hat Security Advisory RHSA-2022:2043 vom 2022-05-10external
- Red Hat Security Advisory RHSA-2022:4880 vom 2022-06-02external
- Red Hat Security Advisory RHSA-2022:5188 vom 2022-06-25external
- Amazon Linux Security Advisory ALAS-2021-1545 vom 2021-11-05external
- Elastic Stack 7.14.1 Security Update vom 2021-09-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan