Lucene search
+L

2 matches found

OSV
OSV
added 2026/07/28 8:58 a.m.8 views

BIT-KIBANA-2026-56146 Improper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure

Improper Access Control CWE-284 in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged authenticated user with read-only Security Solution access could perform write operations on watchlist data that shoul...

5.4CVSS5.8AI score0.00238EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/21 9:32 p.m.14 views

EUVD-2026-46396

Improper Access Control CWE-284 in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged authenticated user with read-only Security Solution access could perform write operations on watchlist data that shoul...

5.4CVSS5.3AI score0.00238EPSS
SaveExploits0References2
Rows per page
Query Builder