SB2023091975 - Inclusion of sensitive information into log files in Kibana

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2023091975

SB2023091975 - Inclusion of sensitive information into log files in Kibana

Published: September 19, 2023

Security Bulletin ID SB2023091975
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Inclusion of Sensitive Information in Log Files (CVE-ID: CVE-2023-31422)

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to software stores sensitive information into log files when logging in the JSON layout or when the pattern layout is configured to log the %meta pattern. A local user can read the log files and gain access to sensitive data, such as authentication credentials, cookies, authorization headers, query params, request paths, and other metadata. Some examples of sensitive data which can be included in the logs are account credentials for kibana_system, kibana-metricbeat, or Kibana end-users.


Remediation

Install update from vendor's website.

References