CyberRota Analysis
AI analysis pending.
CVE
CVE-2016-10364
Severity
MEDIUM
CVSS
6.5
EPSS
0.99%
Original NVD Description
With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)