Elasticsearch Kibana CVE-2016-1000219 Information Disclosure Vulnerability

Bugtraq ID:	99178
Class:	Input Validation Error
CVE:	CVE-2016-1000219
Remote:	Yes
Local:	No
Published:	Jun 16 2017 12:00AM
Updated:	Jun 16 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Elasticsearch Kibana 4.5.3 Elasticsearch Kibana 4.5.2 Elasticsearch Kibana 4.5.1 Elasticsearch Kibana 4.5 Elasticsearch Kibana 4.1.10 Elasticsearch Kibana 4.1.9 Elasticsearch Kibana 4.1.8 Elasticsearch Kibana 4.1.7 Elasticsearch Kibana 4.1.6 Elasticsearch Kibana 4.1.5 Elasticsearch Kibana 4.1.4 Elasticsearch Kibana 4.1.3 Elasticsearch Kibana 4.1.2 Elasticsearch Kibana 4.1.1 Elasticsearch Kibana 4.1
Not Vulnerable:	Elasticsearch Kibana 4.5.4 Elasticsearch Kibana 4.1.11

Elasticsearch Kibana CVE-2016-1000219 Information Disclosure Vulnerability

Elasticsearch Kibana is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain potentially sensitive information. This may lead to further attacks.

Versions prior to Elasticsearch Kibana 4.5.4 and 4.1.11 are vulnerable.

Elasticsearch Kibana CVE-2016-1000219 Information Disclosure Vulnerability

Attackers can use readily available tools to exploit this issue.

Elasticsearch Kibana CVE-2016-1000219 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Elasticsearch Kibana CVE-2016-1000219 Information Disclosure Vulnerability

References:

• Elasticsearch Homepage (Elasticsearch)
  
• Elasticsearch Security Issues (Elasticsearch)