CVE-2016-1000219 Information disclosure in n/a
Attackers can hijack user sessions by reading sensitive cookies and authorization headers from log files when custom logging outputs are configured.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-1000219?
CVE-2016-1000219 is a high-severity vulnerability in Elastic Kibana, published on 16 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.
Weakness: CWE-285
Which versions are affected by CVE-2016-1000219?
It affects 1 product.
Products include Elastic Kibana.
How do I fix CVE-2016-1000219?
Upgrade to a fixed version.
Is CVE-2016-1000219 being exploited?
There is no known exploitation of CVE-2016-1000219 in the wild and no public exploit code.
Other vulnerabilities in Elastic Kibana
Sources
Also known as GHSA-q36m-wm9g-699v.