Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-43707

Опубликовано: 23 янв. 2025
Источник: debian
EPSS Низкий

Описание

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
kibanaitppackage

EPSS

Процентиль: 37%
0.00162
Низкий

Связанные уязвимости

CVSS3: 7.7
nvd
около 1 года назад

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.

CVSS3: 7.7
github
около 1 года назад

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.

CVSS3: 7.7
fstec
больше 1 года назад

Уязвимость сервиса визуализации данных Kibana, связанная с недостатками контроля доступа, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации

EPSS

Процентиль: 37%
0.00162
Низкий