CVE-2024-43706
Kibana Improper Authorization
Summary
Kibana Improper Authorization
Original description
The description as published by the source.
Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint.
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"8.12.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"8.12.1"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co