Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-frvx-m4v3-94v5

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that results in that user gaining elevated privileges.

An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that results in that user gaining elevated privileges.

EPSS

Процентиль: 54%
0.00308
Низкий

8.8 High

CVSS3

Дефекты

CWE-269
CWE-284

Связанные уязвимости

CVSS3: 8.8
nvd
больше 8 лет назад

An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that results in that user gaining elevated privileges.

CVSS3: 8.8
debian
больше 8 лет назад

An error was found in the permission model used by X-Pack Alerting 5.0 ...

EPSS

Процентиль: 54%
0.00308
Низкий

8.8 High

CVSS3

Дефекты

CWE-269
CWE-284