Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Critical vulnerability in Kibana #165

Closed
kravietz opened this issue Apr 11, 2019 · 3 comments
Closed

Critical vulnerability in Kibana #165

kravietz opened this issue Apr 11, 2019 · 3 comments
Labels
operations
Milestone
15th sprint week

Comments

@kravietz
Copy link
Contributor

The role installs Kibana 6.5.4 which contains critical remote code execution vulnerability in Timelion component and should be upgraded to 6.6.1 at least per https://nvd.nist.gov/vuln/detail/CVE-2019-7609
@manuasir
Copy link
Contributor

Hi @kravietz ,

Thank you, I will let you know when the upgrade's done.

Cheers

@kravietz
Copy link
Contributor Author

@manuasir excellent, thank you for prompt reaction!

@LuisGi93 LuisGi93 mentioned this issue Apr 11, 2019
Merged
@manuasir manuasir added this to the 15th sprint week milestone Apr 11, 2019
@LuisGi93 LuisGi93 mentioned this issue Apr 11, 2019
Merged
@manuasir
Copy link
Contributor

Hello @kravietz ,

We already updated to the latest 6.7.1 version of ELK.
Thank you for reporting this, don't hesitate to collaborate anytime.

Cheers

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
operations
Projects
None yet
Milestone
15th sprint week
Development

No branches or pull requests
2 participants
@kravietz @manuasir