CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-03-25
Elastic Kibana Timelion Prototype Pollution Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2019-7609)
[Affected Scope] Kibana versions before 5.6.15 and 6.6.1
[Impact] Unauthenticated attackers can exploit a prototype pollution flaw in the Timelion visualizer to execute arbitrary shell commands with the privileges of the Kibana process on the host system.
[Mitigation] Immediately upgrade Kibana to version 5.6.15, 6.6.1, or later, or disable the Timelion application in the configuration file.