漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page source. Elastic Stack monitoring features provide a way to keep a pulse on the health and performance of your Elasticsearch cluster. Authentication with a vulnerable Kibana instance is not required to view the exposed information. The Elastic Stack monitoring exposure only impacts users that have set any of the optional monitoring.ui.elasticsearch.* settings in order to configure Kibana as a remote UI for Elastic Stack Monitoring. The same vulnerability in Kibana could expose other non-sensitive application-internal information in the page source.
CVSS Information
N/A
Vulnerability Type
信息暴露
Vulnerability Title
Elastic Kibana 信息泄露漏洞
Vulnerability Description
Elastic Kibana是美国Elastic公司的一个应用系统。一个免费且开放的用户界面,能够让您对 Elasticsearch 数据进行可视化,并让您在 Elastic Stack 中进行导航。 Elastic Kibana 7.8.0 版本到 7.17.2 版本和 8.0.0 版本到 8.1.2 版本存在安全漏洞,该漏洞源于可能会暴露 Kibana 页面源中与 Elastic Stack 监控相关的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A