Lucene search
+L

3 matches found

OSV
OSV
added 2025/12/20 11:36 a.m.7 views

BIT-ELK-2025-68422 Kibana Improper Authorization

Improper Authorization CWE-285 in Kibana can lead to privilege escalation CAPEC-233 by allowing an authenticated user to bypass intended permission restrictions via a crafted HTTP request. This allows an attacker who lacks the live queries - read permission to successfully retrieve the list of li...

4.3CVSS6.7AI score0.00226EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/14 5:38 a.m.7 views

BIT-ELK-2024-43706 Kibana Improper Authorization

Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint...

8.8CVSS7.4AI score0.00352EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/10 4:59 p.m.18 views

CVE-2024-43706 Kibana Improper Authorization

Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint...

7.6CVSS0.00352EPSS
SaveExploits0References1
Rows per page
Query Builder