CVE-2024-37279

Kibana Broken Access Control issue

Medium · published June 13, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00372 · 29.9th percentile
Published
2024-06-13T17:04Z
EPSS history
Timeline
  • 13 JUN 17:04Z
    Kibana Broken Access Control issue
    cvelistv5