Red Hat Security Advisory: Red Hat OpenShift Enterprise Kibana security update
An update for Red Hat OpenShift Enterprise Kibana images is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-1000220US | medium6.1 | — | ||
Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers. | ||||
| CVE-2016-1000219US | high7.5 | — | ||
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be use… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (20)
- Behobenkibana-0:4.1.11-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-0:4.1.11-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-0:4.1.11-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-0:4.1.11-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-debuginfo-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-debuginfo-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-debuginfo-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenkibana-debuginfo-0:4.1.11-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836 - Behobenopenshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 The following images are included in this errata: openshift3/logging-kibana:3.1.1-10 openshift3/logging-elasticsearch:3.1.1-14 openshift3/logging-kibana:3.2.1-5 openshift3/logging-elasticsearch:3.2.1-7
https://access.redhat.com/errata/RHSA-2016:1836
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan