PT-2019-5279 · Elastic · Kibana

Publicado 2019-02-19 · Atualizado 2025-11-07 · CVE-2019-7609

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kibana versions prior to 5.6.15 and 6.6.1

Description The issue is related to insufficient code generation management in the Timelion visualizer of Kibana, which can lead to arbitrary code execution. An attacker with access to the Timelion application could send a request to execute javascript code, potentially resulting in the execution of arbitrary commands with the permissions of the Kibana process on the host system.

Recommendations For Kibana versions prior to 5.6.15, update to version 5.6.15 or later. For Kibana versions prior to 6.6.1, update to version 6.6.1 or later. As a temporary workaround, consider disabling the Timelion visualizer until a patch is available. Restrict access to the Timelion application to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2020-02180

CVE-2019-7609

RHSA-2019:2860

Produtos afetados

Kibana

Referências · 31

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/kibana_timelion_prototype_pollution_rce.rb · Exploit
• 🔥 https://github.com/LandGrey/CVE-2019-7609 · Exploit
• 🔥 https://github.com/jas502n/kibana-RCE · Exploit
• 🔥 https://github.com/mpgn/CVE-2019-7609 · Exploit
• 🔥 https://github.com/hekadan/CVE-2019-7609 · Exploit
• 🔥 https://github.com/Cr4ckC4t/cve-2019-7609 · Exploit
• 🔥 http://packetstormsecurity.com/files/174569/Kibana-Timelion-Prototype-Pollution-Remote-Code-Execution.html · Exploit
• https://t.me/rnetsec/10793 · Publicação no Telegram
• https://t.me/thebugbountyhunter/4953 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-7609 · Aviso do Fabricante
• https://elastic.co/community/security · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/436 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2020-02180 · Nota de Segurança
• https://access.redhat.com/security/cve/cve-2019-7609 · Nota
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Nota