CVE-2018-17245

2018-12-2022:29:00

Google

osv.dev

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.8%

JSON

Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PDF reports. If a report requests external resources plaintext credentials are included in the HTTP request that could be recovered by an external resource provider.

CPENameOperatorVersion
elasticsearcheq4.1.0
elasticsearcheq6.0.0-alpha2
elasticsearcheq6.0.0-alpha1
elasticsearcheq6.4.2
elasticsearcheq5.0.0-alpha5
elasticsearcheq6.4.1
elasticsearcheq4.6.0
elasticsearcheq4.2.0-beta1
elasticsearcheq6.4.0
elasticsearcheq4.0.0

Name	Operator	Version
elasticsearch	eq	4.1.0
elasticsearch	eq	6.0.0-alpha2
elasticsearch	eq	6.0.0-alpha1
elasticsearch	eq	6.4.2
elasticsearch	eq	5.0.0-alpha5
elasticsearch	eq	6.4.1
elasticsearch	eq	4.6.0
elasticsearch	eq	4.2.0-beta1
elasticsearch	eq	6.4.0
elasticsearch	eq	4.0.0