Количество 4
Количество 4
CVE-2024-23446
An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the .alerts-security.alerts-{space_id} indices. Users who are authorized to call this API may obtain unauthorized access to documents if their roles are configured with DLS or FLS against the aforementioned index.
CVE-2024-23446
An issue was discovered by Elastic, whereby the Detection Engine Searc ...
GHSA-967w-7xjc-4wqj
An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the .alerts-security.alerts-{space_id} indices. Users who are authorized to call this API may obtain unauthorized access to documents if their roles are configured with DLS or FLS against the aforementioned index.
BDU:2024-01379
Уязвимость сервиса визуализации данных Kibana, связанная с недостатками контроля доступа, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-23446 An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the .alerts-security.alerts-{space_id} indices. Users who are authorized to call this API may obtain unauthorized access to documents if their roles are configured with DLS or FLS against the aforementioned index. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| CVE-2024-23446 An issue was discovered by Elastic, whereby the Detection Engine Searc ... | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
| GHSA-967w-7xjc-4wqj An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the .alerts-security.alerts-{space_id} indices. Users who are authorized to call this API may obtain unauthorized access to documents if their roles are configured with DLS or FLS against the aforementioned index. | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
 | BDU:2024-01379 Уязвимость сервиса визуализации данных Kibana, связанная с недостатками контроля доступа, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации | CVSS3: 6.5 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу