CVE-2016-1000219
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and...
CVE-2016-1000219 is a high vulnerability (CVSS 7.5) in Elastic Kibana, published June 16, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.04%, the 81st percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 3.0, NVD
- Exploit chance
- 2.04%EPSS, 81st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kibanaRed Hat:openshift:3.1::el7 From an advisory covering 2 CVEs | before 0:4.1.11-1.el7 | 0:4.1.11-1.el7 |
kibana-debuginfoRed Hat:openshift:3.1::el7 From an advisory covering 2 CVEs | before 0:4.1.11-1.el7 | 0:4.1.11-1.el7 |
openshift-elasticsearch-pluginRed Hat:openshift:3.1::el7 From an advisory covering 2 CVEs | before 0:0.16.0.redhat_1-1.el7 | 0:0.16.0.redhat_1-1.el7 |
kibanaRed Hat:openshift:3.2::el7 From an advisory covering 2 CVEs | before 0:4.1.11-1.el7 | 0:4.1.11-1.el7 |
kibana-debuginfoRed Hat:openshift:3.2::el7 From an advisory covering 2 CVEs | before 0:4.1.11-1.el7 | 0:4.1.11-1.el7 |
openshift-elasticsearch-pluginRed Hat:openshift:3.2::el7 From an advisory covering 2 CVEs | before 0:0.16.0.redhat_1-1.el7 | 0:0.16.0.redhat_1-1.el7 |
What each source reports
NVD Score used
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.
- Record
CVE-2016-1000219- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-285
- Updated
- 2026-11-02
CVE ListNo score
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.
- Record
CVE-2016-1000219- Updated
- 2026-11-02
EUVDEUVD-2016-1163No score
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.
- Record
EUVD-2016-1163- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q36m-wm9g-699v
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and...
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.
- Record
GHSA-q36m-wm9g-699v- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-285
- Updated
- 2026-11-02
OSV
Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.
- Record
CVE-2016-1000219- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2016:1836
Red Hat Security Advisory: Red Hat OpenShift Enterprise Kibana security update
- Record
RHSA-2016:1836- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/99178
elastic.co/community/security
nvd.nist.gov/vuln/detail/CVE-2016-1000219
github.com/advisories/GHSA-q36m-wm9g-699v
access.redhat.com/errata/RHSA-2016:1836
Show 8 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1364389
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1836.json
cve.org/CVERecord?id=CVE-2016-1000219