Kibana incomplete fix for ESA-2017-23 (ESA-2018-03) The fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions before 6.1.3 and 5.6.7 have an open redirect vulnerability on the login page that would enable an attacker to craft a link that redirects to an arbitra…

Elastic Stack 6.1.3 and 5.6.7 security update

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Elastic Stack 6.1.3 and 5.6.7 security update