CVE-2018-17246
critical · 9.8A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
9.8
CVSS
82.3%
EPSS (exploit prob.)
100th
EPSS percentile
2018-12-20
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-73CWE-829
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| elastic | kibana | >= 5.0.0, < 5.6.13 |
| elastic | kibana | >= 6.0.0, < 6.4.3 |
| redhat | openshift_container_platform | 3.11 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/106285
- https://access.redhat.com/errata/RHBA-2018:3743
- https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594
- https://www.elastic.co/community/security
- http://www.securityfocus.com/bid/106285
- https://access.redhat.com/errata/RHBA-2018:3743
- https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594
- https://www.elastic.co/community/security
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-17246