4.3
Moyenne
CVE-2026-78584 Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query…
Description
Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query System for Information (CAPEC-54). An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are not authorized to access.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Kibana 9.4 | 9.4.0 → 9.4.3 | Pas de correctif indiqué |
Références
- discuss.elastic.co discuss.elastic.co
Chronologie
- Publiée
- Dernière modification
Autres CVE de Kibana
Les 196 CVE de Kibana →
CVE-2026-115295
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing…
4.3
Moyenne
CVE-2026-115294
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to…
7.3
Élevée
CVE-2026-115293
Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to disclosure of…
6.5
Moyenne
CVE-2026-115292
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana Machine Learning can lead to information disclosure…
4.3
Moyenne