File Inclusion Bug in Kibana Console for Elasticsearch Gets Exploit Code

guest · Dec 19, 2018

File Inclusion Bug in Kibana Console for Elasticsearch Gets Exploit Code
December 18, 2018
https://www.bleepingcomputer.com/ne...-console-for-elasticsearch-gets-exploit-code/

Exploit code has been published for a local file inclusion (LFI) type of vulnerability affecting the Console plugin in Kibana data visualization tool for Elasticsearch; an attacker could use this to upload a malicious script and potentially get remote code execution.
Bug could lead to remote code execution
The proof-of-concept (PoC) code is a one-liner with barely more than 110 characters and it has as destination path the password directory. When run, the credentials would be dumped in the Kibana log.

Published by a member of the Slow Mist Technology team, the PoC is for CVE-2018-17246, which affects versions of Kibana before 6.4.3 and 5.6.13, discovered by Nethanel Coppenhagen of CyberArk Labs, who provides a detailed description of the bug.
Click to expand...

Log in or Sign up

File Inclusion Bug in Kibana Console for Elasticsearch Gets Exploit Code

guest Guest

Log in or Sign up

File Inclusion Bug in Kibana Console for Elasticsearch Gets Exploit Code

guest Guest

Useful Searches