Lucene search
+L

2 matches found

OSV
OSV
•added 2026/07/21 8:09 p.m.•20 views

CVE-2026-56146 Improper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure

Improper Access Control CWE-284 in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged authenticated user with read-only Security Solution access could perform write operations on watchlist data that shoul...

5.4CVSS5.3AI score
SaveExploits0References3
Elastic
Elastic
•added 2026/07/21 8:06 p.m.•35 views

Kibana 9.4.3 Security Update (ESA-2026-58)

Improper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure Improper Access Control CWE-284 in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged authenticated...

5.4CVSS5.7AI score0.00238EPSS
SaveExploits0
Rows per page
Query Builder