Aller au contenu
en Se connecter
Non notée

CVE-2016-10364 With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings…

Description

With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions.

Produits et versions touchés

Produit Versions touchées Corrigé en
Elastic X-Pack Security Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Elastic X-Pack Security

Les 6 CVE de Elastic X-Pack Security →
CVE-2017-8447 An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement Non notée CVE-2017-8445 An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1 Non notée CVE-2017-8451 With X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the login page that would… Non notée CVE-2017-8449 X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules… Non notée
Suivre cette CVE