Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-54qw-wcc8-qjp6

Опубликовано: 23 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.

EPSS

Процентиль: 37%
0.00162
Низкий

7.7 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 7.7
nvd
около 1 года назад

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.

CVSS3: 7.7
debian
около 1 года назад

An issue was identified in Kibana where a user without access to Fleet ...

CVSS3: 7.7
fstec
больше 1 года назад

Уязвимость сервиса визуализации данных Kibana, связанная с недостатками контроля доступа, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации

EPSS

Процентиль: 37%
0.00162
Низкий

7.7 High

CVSS3

Дефекты

CWE-200