CVE-2020-7012 in Kibanainformazioni

Riassunto

di MITRE

Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker executing code with the permissions of the Kibana process on the host system.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Prenotare

14/01/2020

Moderazione

accettato

CPE

pronto

EPSS

0.18211

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2020-7012
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2020-7012
CVE Detailshttps://www.cvedetails.com/cve/CVE-2020-7012/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!