Not rated
CVE-2016-10364 With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings…
Description
With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Elastic X-Pack Security | Versions not published |
References
- www.elastic.co www.elastic.co
Timeline
- Published
- Last modified
Other CVEs of Elastic X-Pack Security
The 6 CVEs of Elastic X-Pack Security →
CVE-2017-8447
An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement
Not rated
CVE-2017-8445
An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1
Not rated
CVE-2017-8451
With X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the login page that would…
Not rated
CVE-2017-8449
X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules…
Not rated