Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m95c-48mw-v3r3

Опубликовано: 22 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

EPSS

Процентиль: 10%
0.00202
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.3
nvd
15 дней назад

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

CVSS3: 6.3
debian
15 дней назад

Missing Authorization (CWE-862) in Kibana allows an authenticated user ...

EPSS

Процентиль: 10%
0.00202
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-862