CVE-2019-13422

MEDIUM

Search Guard Kibana Plugin < 5.6.8-7 - Open Redirect via Login

Title source: llm

Description

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://search-guard.com/cve-advisory/

Vendor Advisory x_refsource_confirm

https://docs.search-guard.com/6.x-25/changelog-kibana-6.x-12

Scores

CVSS v3 6.1

EPSS 0.0086

EPSS Percentile 53.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601 CWE-79

Status published

Products (1)

search-guard/search_guard < 5.6.8-7

Published Aug 23, 2019

Tracked Since Feb 18, 2026