CVE-2024-43706
Kibana Improper Authorization
Résumé
Kibana Improper Authorization
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint.
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"8.12.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.12.0"},{"fixed":"8.12.1"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co