Kibana Improper Authorization(CVE-2024-43706)

概要

Kibana Improper Authorization

取得元が公開している説明をそのまま載せています (多くは英語)。

Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

Bitnami elk

[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"8.12.1"}]}]

Bitnami kibana

[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"8.12.1"}]}]