CVE-2017-8443

CVE-2017-8443 affects Kibana X-Pack security versions prior to 5.4.3, where a crafted URL could redirect users to an improperly initialized login screen. If users enter credentials on this screen, they become visible in the URL bar and could be logged, leading to credential exposure. This vulnerability has a CVSS score of 6.5 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and resulting in high confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.