UpHeron
All vulnerabilities

Servers and applications

CVE-2021-37939

It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public view. Using this vulnerability, a malicious user with the ability to create connectors, could utilize these connectors to view limited HTTP response data on hosts accessible to the cluster.

Severity
Low 2.7
Published
18 Nov 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.15.2
Sources
NVD

Affected software

SoftwareAffected versions
KibanaServers and applications · cpe:a:elastic:kibana
  • From 7.8.0 before 7.15.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-37939
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-37939