Description
Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked. A malicious user can access cached credentials from a Crowdstrike connector in another space by creating and running a Crowdstrike connector in a space to which they have access.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Elastic Kibana
Default version status: unaffected
7.0.0 to ≤ 7.17.29affected8.14.0 to ≤ 8.18.7affected8.19.0 to ≤ 8.19.4affected9.0.0 to ≤ 9.0.7affected9.1.0 to ≤ 9.1.4affected