CVE catalog
CVE-2018-3817
Security update for grafana, kafka, logstash, openstack-monasca-installer
- Severity
- Medium · CVSS 4.3
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.02% · Oct 25, 2026
This update for grafana, kafka, logstash, openstack-monasca-installer fixes the following issues: Security issues fixed: - CVE-2018-12099: grafana: Fix XSS vulnerabilities in dashboard links (bsc#1096985). - CVE-2018-3817: logstash: Fix inadvertently logging of sensitive information (bsc#1090849). Bug fixes: - bsc#1095603: Disable jmxremote debugging. - bsc#1097847: Make time series database schema setup conditional. - bsc#1094448: Set log rotation options. - bsc#1090336: Add complete set of elasticsearch performance tunables. - bsc#1101366: Fix build issues with s390x, ppc64le and aarch64. - Fix various spec errors affecting Leap 15 and Tumbleweed
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | grafana | hpe helion openstack 8 | 4.5.1-4.3.1 | fixed |
| Suse | kafka | hpe helion openstack 8 | 0.9.0.1-5.3.1 | fixed |
| Suse | logstash | hpe helion openstack 8 | 2.4.1-5.4.1 | fixed |
| Suse | openstack-monasca-installer | hpe helion openstack 8 | 20180622_15.06-3.6.1 | fixed |
| Suse | grafana | openstack cloud 8 | 4.5.1-4.3.1 | fixed |
| Suse | kafka | openstack cloud 8 | 0.9.0.1-5.3.1 | fixed |
| Suse | logstash | openstack cloud 8 | 2.4.1-5.4.1 | fixed |
| Suse | openstack-monasca-installer | openstack cloud 8 | 20180622_15.06-3.6.1 | fixed |
| Suse | grafana | openstack cloud crowbar 8 | 4.5.1-4.3.1 | fixed |
| Suse | kafka | openstack cloud crowbar 8 | 0.9.0.1-5.3.1 | fixed |
| Suse | logstash | openstack cloud crowbar 8 | 2.4.1-5.4.1 | fixed |
| Suse | openstack-monasca-installer | openstack cloud crowbar 8 | 20180622_15.06-3.6.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | grafana | rpm | hpe helion openstack 8 | 4.5.1-4.3.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | kafka | rpm | hpe helion openstack 8 | 0.9.0.1-5.3.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | logstash | rpm | hpe helion openstack 8 | 2.4.1-5.4.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | openstack-monasca-installer | rpm | hpe helion openstack 8 | 20180622_15.06-3.6.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | grafana | rpm | openstack cloud 8 | 4.5.1-4.3.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | kafka | rpm | openstack cloud 8 | 0.9.0.1-5.3.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | logstash | rpm | openstack cloud 8 | 2.4.1-5.4.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | openstack-monasca-installer | rpm | openstack cloud 8 | 20180622_15.06-3.6.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | grafana | rpm | openstack cloud crowbar 8 | 4.5.1-4.3.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | kafka | rpm | openstack cloud crowbar 8 | 0.9.0.1-5.3.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | logstash | rpm | openstack cloud crowbar 8 | 2.4.1-5.4.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
| Suse | openstack-monasca-installer | rpm | openstack cloud crowbar 8 | 20180622_15.06-3.6.1 | Not reported | SUSE-SU-2018:2317-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: