| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | ≥ 9.0.0, < 9.0.6≥ 9.1.0, < 9.1.3 | 9.0.69.1.3 |
Incorrect authorization in Kibana can lead to privilege escalation via the built-in reporting_user role which incorrectly has the ability to access all Kibana Spaces.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free