| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | ≥ 7.0.0, < 7.12.0< 6.8.15 | 7.12.06.8.15 |
In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.session.idleTimeout setting is not being respected. This was caused by background polling activities unintentionally extending authenticated users sessions, preventing a user session from timing out.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free