Red Hat Security Advisory: Red Hat OpenShift Enterprise Kibana security update
An update for Red Hat OpenShift Enterprise Kibana images is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-1000220US | medium6.1 | — | ||
Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers. | ||||
| CVE-2016-1000219US | high7.5 | — | ||
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be use… | ||||
references
External citations — patches, advisories, analysis.
remediations (20)
- Fixedkibana-0:4.1.11-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-0:4.1.11-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-0:4.1.11-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-0:4.1.11-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-debuginfo-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-debuginfo-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-debuginfo-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedkibana-debuginfo-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Fixedopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan