CVE-2019-13423
High
Description
Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a) Kibana is configured to use Single-Sign-On as authentication method, one of Kerberos, JWT, Proxy, Client certificate. b) The kibanaserver user is configured to use HTTP Basic as the authentication method. c) Search Guard is configured to use an SSO authentication domain and HTTP Basic at the same time
SeverityHigh
CVSS8.8
Exploit probability—
ProductSearch-guard Search Guard
PublishedAug 23, 2019
First seenAug 23, 2019
Weakness typeCWE-287Improper authentication
How to fix
Update
- search-guard search_guard5.6.8-7, 6.2.3-12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| search-guard search_guard | v < 5.6.8-7, 6.1.0-8 ≤ v < 6.2.3-12 | 5.6.8-7, 6.2.3-12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.