| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | = 9.2.0≥ 7.0.0, ≤ 7.17.29≥ 8.0.0, < 8.19.7≥ 9.0.0, < 9.1.7 | 8.19.79.1.7 |
Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to bypass intended permission restrictions via a crafted HTTP request. This allows an attacker who lacks the live queries - read permission to successfully retrieve the list of live queries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free