BIT-elk-2024-43707
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/elk/BIT-elk-2024-43707.json
- JSON Data
- https://api.osv.dev/v1/vulns/BIT-elk-2024-43707
- Aliases
- Published
- 2025-01-27T07:10:02Z
- Modified
- 2026-09-10T16:01:00Z
- Summary
- Kibana exposure of sensitive information to an unauthorized actor
- Details
-
An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.
- Database specific
{ "cpes": [ "cpe:2.3:a:elasticsearch:kibana:*:*:*:*:*:node.js:*:*" ], "severity": "High" }- References
Affected packages
Bitnami / elk
Package
- Name
- elk
- Purl
- pkg:bitnami/elk
Severity
- 7.7 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVSS Calculator