CVE-2017-8443 Information disclosure in Kibana X-Pack Security
Attackers can steal user credentials by tricking users into logging in via a crafted URL that exposes credentials in the browser address bar.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-8443?
CVE-2017-8443 is a medium-severity vulnerability in Elastic Kibana, published on 30 Jun 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redirect to an improperly initialized Kibana login screen. If the user enters credentials on this screen, the credentials will appear in the URL bar. The credentials could then be viewed by untrusted parties or logged into the Kibana access logs.
Which versions are affected by CVE-2017-8443?
It affects 1 product.
Products include Elastic Kibana.
How do I fix CVE-2017-8443?
No fix has been published for CVE-2017-8443 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-8443 being exploited?
There is no known exploitation of CVE-2017-8443 in the wild and no public exploit code.
Other vulnerabilities in Elastic Kibana
Sources
Also known as GHSA-8379-8jj9-c2jj.