CVE-2016-1000219 — kibana: Session hijack via stealing cookies and auth headers from log ESA-2016-04

Back Back to CVE browser

HIGH

kibana: Session hijack via stealing cookies and auth headers from log ESA-2016-04

Published Jun 16, 2017

7.5

HIGH

CVSS 3.0

EPSS 2.04%

Description

Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield.

Affected products

Red Hat OpenShift Container Platform 3.2

kibana-0:4.1.11-1.el7

Fixed · RHSA-2016:1836
Red Hat OpenShift Container Platform 3.2

openshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7

Fixed · RHSA-2016:1836
Red Hat OpenShift Enterprise 3.1

kibana-0:4.1.11-1.el7

Fixed · RHSA-2016:1836
Red Hat OpenShift Enterprise 3.1

openshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7

Fixed · RHSA-2016:1836
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Operational Tools

kibana

Will not fix
Red Hat OpenStack Platform 10 (Newton) Operational Tools

kibana

Not affected
Red Hat OpenStack Platform 8 (Liberty) Operational Tools

kibana

Will not fix
Red Hat OpenStack Platform 9 (Mitaka) Operational Tools

kibana

Will not fix

Product	Package	State	Advisory
Red Hat OpenShift Container Platform 3.2	kibana-0:4.1.11-1.el7	Fixed	RHSA-2016:1836
Red Hat OpenShift Container Platform 3.2	openshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7	Fixed	RHSA-2016:1836
Red Hat OpenShift Enterprise 3.1	kibana-0:4.1.11-1.el7	Fixed	RHSA-2016:1836
Red Hat OpenShift Enterprise 3.1	openshift-elasticsearch-plugin-0:0.16.0.redhat_1-1.el7	Fixed	RHSA-2016:1836
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) Operational Tools	kibana	Will not fix	n/a
Red Hat OpenStack Platform 10 (Newton) Operational Tools	kibana	Not affected	n/a
Red Hat OpenStack Platform 8 (Liberty) Operational Tools	kibana	Will not fix	n/a
Red Hat OpenStack Platform 9 (Mitaka) Operational Tools	kibana	Will not fix	n/a

Remediation

No remediation recorded yet.

Metrics

2.04% 0.02039

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.02039

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (12 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	2.04% (0.02039)	80.42th	v5 (v2026.06.15)
Jun 15, 2026	2.04% (0.02039)	78.53th	v5 (v2026.06.15)
Mar 30, 2025	0.92% (0.00919)	73.85th	v4 (v2025.03.14)
Mar 29, 2025	7.61% (0.07610)	86.15th	v4 (v2025.03.14)
Mar 17, 2025	0.78% (0.00782)	72.06th	v4 (v2025.03.14)
Dec 12, 2024	0.10% (0.00096)	41.99th	v3 (v2023.03.01)
Jun 13, 2024	0.10% (0.00096)	40.49th	v3 (v2023.03.01)
Mar 7, 2023	0.10% (0.00095)	38.48th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Sep 10, 2022	0.89% (0.00885)	26.24th	v2 (v2022.01.01)
Apr 1, 2022	0.89% (0.00885)	24.24th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00885)	10.50th	v2 (v2022.01.01)

Weaknesses (2)

CWE-285

CWE-532

References (6)

http://www.securityfocus.com/bid/99178
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2016-1000219
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1364394
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2016-1000219
https://www.cve.org/CVERecord?id=CVE-2016-1000219
https://www.elastic.co/community/security
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/99178		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2016-1000219		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1364394		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2016-1000219
https://www.cve.org/CVERecord?id=CVE-2016-1000219
https://www.elastic.co/community/security		x_refsource_CONFIRMVendor Advisory