DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Elasticsearch und Kibana: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2021-09-01
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen und um Administratorrechte zu erlangen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-37937US | high8.8 | — | ||
An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be… | ||||
| CVE-2021-22151US | medium4.3 | — | ||
It was discovered that Kibana was not validating a user supplied path, which would load .pbf files. Because of this, a malicious user could arbitrarily traverse the Kibana host to… | ||||
| CVE-2021-22150US | high7.2 | — | ||
It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in a… | ||||
| CVE-2021-37936US | medium5.4 | — | ||
It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticse… | ||||
| CVE-2021-3672US | medium5.6 | — | ||
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might pot… | ||||
| CVE-2021-22930US | critical9.8 | — | ||
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior. | ||||
| CVE-2021-22939US | medium5.3 | — | ||
If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired… | ||||
| CVE-2021-22931US | critical9.8 | — | ||
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name S… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2021-3623 vom 2021-09-22external
- Red Hat Security Advisory RHSA-2021:3638 vom 2021-09-22external
- Red Hat Security Advisory RHSA-2021:3639 vom 2021-09-22external
- Red Hat Security Advisory RHSA-2022:2043 vom 2022-05-10external
- Red Hat Security Advisory RHSA-2022:4880 vom 2022-06-02external
- Red Hat Security Advisory RHSA-2022:5188 vom 2022-06-25external
- Amazon Linux Security Advisory ALAS-2021-1545 vom 2021-11-05external
- Elastic Stack 7.14.1 Security Update vom 2021-09-01external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan