Published: 03/03/2022 Updated: 16/03/2022

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 357

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

A flaw exists in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this privilege could not modify alerting connectors. This effectively means that Read users could disable existing alerting rules.

Vulnerable Product	Search on Vulmon	Subscribe to Product
elastic kibana
elastic kibana 8.0.0

A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules A user with this privilege would be able to create new alerting rules or overwrite existing ones However, any new or modified rules would not be enabled, and a user with this privilege could not modify alerting connectors This effect ...

CWE-862 https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2022-23709

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-23709

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect