Lucene search
+L

4 matches found

osv-bit
osv-bit
•added 2026/09/09 8:41 a.m.•14 views

BIT-ELK-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

8.1CVSS5.7AI score0.00386EPSS
SaveExploits0References2
Rows per page
Query Builder