Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:BIT-KIBANA-2024-37279
HistoryJun 17, 2024 - 7:22 a.m.

BIT-kibana-2024-37279

2024-06-1707:22:48
Google
osv.dev
3
kibana
view-only users
alerting rules
run_soon api
system availability
flaw

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries.

CPENameOperatorVersion
kibanage8.6.3
kibanalt8.14.0

Related

cve 1
osv 1
redhatcve 1
nvd 1
vulnrichment 1
cvelist 1
nessus 1
cve
cve
CVE-2024-37279
2024-06-13 17:15:50
osv
osv
BIT-elk-2024-37279
2024-06-17 07:17:38
redhatcve
redhatcve
CVE-2024-37279
2024-06-06 07:31:36
nvd
nvd
CVE-2024-37279
2024-06-13 17:15:50
vulnrichment
vulnrichment
CVE-2024-37279 Kibana Broken Access Control issue
2024-06-13 17:04:41
cvelist
cvelist
CVE-2024-37279 Kibana Broken Access Control issue
2024-06-13 17:04:41
nessus
nessus
Kibana 8.6.3 < 8.14 (ESA-2024-15)
2024-06-21 00:00:00

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON
Related for OSV:BIT-KIBANA-2024-37279
cve1osv1redhatcve1nvd1vulnrichment1cvelist1nessus1