CVE-2024-37279

Kibana Broken Access Control issue

Résumé

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami elk

[{"type":"SEMVER","events":[{"introduced":"8.6.3"},{"fixed":"8.14.0"}]}]

Bitnami kibana

[{"type":"SEMVER","events":[{"introduced":"8.6.3"},{"fixed":"8.14.0"}]}]

Références

advisory nvd.nist.gov
advisory github.com
web discuss.elastic.co