Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-37279

Kibana Broken Access Control issue

Description

A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Kibana

Default version status: unaffected

  • 8.6.3 to ≤ 8.13.4affected

References