Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w44m-x962-x72w

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.session.idleTimeout setting is not being respected. This was caused by background polling activities unintentionally extending authenticated users sessions, preventing a user session from timing out.

In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.session.idleTimeout setting is not being respected. This was caused by background polling activities unintentionally extending authenticated users sessions, preventing a user session from timing out.

EPSS

Процентиль: 15%
0.00049
Низкий

Дефекты

CWE-613

Связанные уязвимости

CVSS3: 4
redhat
почти 5 лет назад

In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.session.idleTimeout setting is not being respected. This was caused by background polling activities unintentionally extending authenticated users sessions, preventing a user session from timing out.

CVSS3: 3.5
nvd
больше 4 лет назад

In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.session.idleTimeout setting is not being respected. This was caused by background polling activities unintentionally extending authenticated users sessions, preventing a user session from timing out.

CVSS3: 3.5
debian
больше 4 лет назад

In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session time ...

EPSS

Процентиль: 15%
0.00049
Низкий

Дефекты

CWE-613