Elastic.Kibana.Timelion.Code.Injection
Description
This indicates an attack attempt to exploit a Code Injection Vulnerability in Elastic Kibana.
A remote, authenticated attacker could exploit this vulnerability by sending a crafted request to the affected application. Successful exploitation could result in the execution of arbitrary code on the target server.
Affected Products
Elastic Kibana 5.x prior to 5.6.15
Elastic Kibana 6.x prior to 6.6.1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |