CyberRota Analysis
AI-GeneratedKibana is vulnerable due to a missing authorization control that allows authenticated users with elevated privileges to access restricted Elasticsearch indices through background tasks. This can lead to unauthorized information disclosure, as sensitive data may be exposed via the entity store output. Organizations using Kibana, particularly those with complex privilege structures, should prioritize addressing this vulnerability to mitigate potential data leaks.
Original NVD Description
Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authorization control was not applied to a Kibana Entity Store configuration operation, allowing an authenticated user with elevated Kibana privileges to indirectly cause a background task to read from Elasticsearch indices that user is not authorized to access. Derived entity data from those indices is then exposed through the entity store output.
Related CVEs
Other vulnerabilities affecting the same vendor(s)