CVE-2016-10364

2017-06-1621:00:00

CWE-306

elastic

www.cve.org

0.001 Low

EPSS

Percentile

28.4%

JSON

With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions.

CNA Affected

[
  {
    "product": "Elastic X-Pack Security",
    "vendor": "Elastic",
    "versions": [
      {
        "status": "affected",
        "version": "before 5.0.2"
      }
    ]
  }
]

References

www.elastic.co/community/security

0.001 Low

EPSS

Percentile

28.4%

JSON

Related for CVELIST:CVE-2016-10364