CVE-2016-10364CWE-306

With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any…

published June 16, 2017

CVSS
—
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00986 · 61.8th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2017-06-16T21:00Z
EPSS history
Timeline
  • 16 JUN 21:00Z
    With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any…
    cvelistv5