Search Guard Kibana Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:floragunn:search_guard_kibana_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Floragunn (6b8f8f01-a69b-509e-bcc0-fec59dcdec2c) |
|---|---|
| Product | Search Guard Kibana Plugin (33788b0f-4b82-5fc6-a84b-bdaffe1c14e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-13423 |
vulnerable | 2026-06-08 05:12:42.239462 |
Details available
Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a) Kibana is configured to use Single-Sign-On as authentication method, one of Kerberos, JWT, Proxy, Client certificate. b) The kibanaserver user is configured to use HTTP Basic as the authentication method. c) Search Guard is configured to use an SSO authentication domain and HTTP Basic at the same time
Published: 2019-08-23T13:30:26.000Z
Updated: 2024-08-04T23:49:24.978Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13422 |
vulnerable | 2026-06-08 05:12:42.238463 |
Details available
Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login.
Published: 2019-08-23T13:35:03.000Z
Updated: 2024-08-04T23:49:24.959Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.