Beveiligingsadvies

CVE-2026-63137

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-01 19:20:14

Laatst bijgewerkt 2026-09-02 03:55:57

Toegewezen door elastic

CVSS-score 8.3

Status PUBLISHED

Beschrijving

Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). A user holding workflow edit permissions could cause scheduled workflow executions to run with the privileges of a different, higher-privileged user, allowing access to and modification of data beyond their own authorization scope.

← Alle CVE's bekijken Bekijk op cve.org ↗