Lucene search
+L

3 matches found

OSV
OSV
added 2026/09/02 2:43 p.m.12 views

CVE-2026-78598 Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job Data

Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding machine learning job management privileges within a single Kibana space could cau...

5.4CVSS5.5AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/09/02 2:43 p.m.14 views

CVE-2026-78598 Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job Data

Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding machine learning job management privileges within a single Kibana space could cau...

5.4CVSS5.9AI score0.00143EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 2:43 p.m.37 views

CVE-2026-78598 Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job Data

Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding machine learning job management privileges within a single Kibana space could cau...

5.4CVSS0.00143EPSS
SaveExploits0References1
Rows per page
Query Builder