Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4432
HistoryJun 19, 2017 - 2:59 a.m.

Privilege Bypass

2017-06-1902:59:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.001 Low

EPSS

Percentile

28.4%

Kibana is vulnerable to privilege bypass attacks. When X-Pack is installed, requests to the short URL and advanced settings services. This flaw allows authenticated users to make requests to those services regardless of their own permissions.

CPENameOperatorVersion
kibanale5.0.1
kibanale5.0.0-rc1

0.001 Low

EPSS

Percentile

28.4%

Related for VERACODE:4432