Lucene search
+L

4 matches found

osv_bit
osv_bit
•added 2026/09/09 8:41 a.m.•15 views

BIT-ELK-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

8.1CVSS5.7AI score0.00386EPSS
SaveExploits0References2
Rows per page
Query Builder