AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-17245

CRITICAL · CVSS 9.8 EPSS 1.52%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-12-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-17245
Severity
CRITICAL
CVSS
9.8
EPSS
1.52%

Original NVD Description

Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PDF reports. If a report requests external resources plaintext credentials are included in the HTTP request that could be recovered by an external resource provider.