{"id":9488,"date":"2019-11-05T02:28:33","date_gmt":"2019-11-05T02:28:33","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=9488"},"modified":"2026-04-17T18:07:51","modified_gmt":"2026-04-17T18:07:51","slug":"kibana-remote-code-execution-vulnerability-cve-2019-7609-threat-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/kibana-remote-code-execution-vulnerability-cve-2019-7609-threat-alert\/","title":{"rendered":"Kibana Remote Code Execution Vulnerability (CVE-2019-7609) Threat Alert"},"content":{"rendered":"


\n<\/p>\n

Vulnerability Description<\/strong><\/h2>\n

In February 2019, an official announcement was made that Kibana had a remote code execution vulnerability. The Kibana version prior to 5.6.15 and 6.6.1 had a functional flaw in the Timelion visualization tool, which allowed an attacker to use Kibana to execute arbitrary code on the server. Currently PoC has been announced; Ussers are recommended to conduct self-examination and protection in a timely manner.<\/p>\n

Kibana is Elasticsearch’s open-source visualization plugin. It provides visualization capability for Elasticsearch by searching and viewing data stored in the Elasticsearch index in forms of  icons, tables and maps. Due to ease of use,  it is widely used in product development. Users who are using Kibana should  pay attention to this vulnerability.<\/p>\n

References:<\/p>\n

https:\/\/www.elastic.co\/cn\/community\/security<\/p>\n

https:\/\/discuss.elastic.co\/t\/elastic-stack-6-6-1-and-5-6-15-security-update\/169077<\/p>\n

Scope of Impact<\/strong><\/h2>\n

Affected Versions<\/strong><\/p>\n