CVE-2026-63141: Kibana: eksik yetkilendirme

Açıklama (NVD)

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

Özet bilgiler

Ürün

Elastic Kibana

CVSS v3.1

5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

%0,23 (yüzdelik 14)

CWE

CWE-862

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• discuss.elastic.co
• CWE-862