CVE-2018-3830
Fixed in a distro release EPSS 2%
Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Products: Elastic Kibana
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 3.11 | atomic-openshift | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-clients-redistributable | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-docker-excluder | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-excluder | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-hyperkube | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-hypershift | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-master | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-node | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-pod | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-sdn-ovs | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-template-service-broker | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | atomic-openshift-tests | 0:3.11.43-1.git.0.647ac05.el7 |
| Red Hat openshift 3.11 | jenkins-2-plugins | 0:3.11.1539805268-1.el7 |
| Red Hat openshift 3.11 | kibana | 0:5.6.12-1.el7 |