CVE-2022-23709

A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules

published March 3, 2022

CVSS
—
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this privilege could not modify alerting connectors. This effectively means that Read users could disable existing alerting rules.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00552 · 45.4th percentile
Published
2022-03-03T21:50Z
EPSS history
Timeline
  • 03 MAR 21:50Z
    A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules
    cvelistv5