Elastic Kibana Vulnérabilités

Chronologie

Version

8.0	4
8.1	4
8.2	4
8.3	4
8.4	4

Contre-mesures

Official Fix	8
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	3

Exploitabilité

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	11

Vecteur d'accès

Not Defined	0
Physical	0
Local	0
Adjacent	6
Network	5

Authentification

Not Defined	0
High	2
Low	9
None	0

Interaction de l'utilisateur

Not Defined	0
Required	1
None	10

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	0
≤6	5
≤7	2
≤8	3
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	0
≤6	5
≤7	2
≤8	3
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	2
≤4	2
≤5	3
≤6	2
≤7	1
≤8	1
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	0
≤7	3
≤8	2
≤9	3
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	1
≤5	0
≤6	0
≤7	3
≤8	2
≤9	1
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	1
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	3
<2k	8
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	11
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (43): 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 7.10, 7.11, 7.12, 7.13, 7.17, 7.17.1, 7.17.2, 7.17.3, 7.17.4, 7.17.5, 7.17.6, 7.17.7, 7.17.8, 7.17.9, 7.17.11, 7.17.12, 7.17.13, 7.17.14, 7.17.15, 8.0, 8.1, 8.2, 8.3, 8.4, 8.5, 8.6, 8.7, 8.8, 8.9, 8.10, 8.11, 8.11.1, 8.12

Publié	Base	Temp	Vulnérabilité	0day	Aujourd'hui	Exp	Con	CTI	CVE
07/02/2024	5.4	5.3	Elastic Kibana Detection Engine Search API .alerts-security.alerts-{space_id} elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2024-23446
13/12/2023	5.7	5.7	Elastic Kibana divulgation de l'information	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-46675
24/11/2023	5.3	5.2	Elastic Kibana Error divulgation de l'information	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-46671
22/11/2023	7.3	7.2	Elastic Kibana Chromium Browser Privilege Escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2021-22142
22/11/2023	3.5	3.5	Elastic Kibana pbf File directory traversal	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-22151
22/11/2023	7.0	6.9	Elastic Kibana Package elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-22150
26/10/2023	6.7	6.6	Elastic Kibana divulgation de l'information	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-31422
05/05/2023	7.1	7.1	Elastic Kibana Uptime/Synthetics elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2023-31415
05/05/2023	7.1	7.1	Elastic Kibana Configuration elévation de privilèges	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2023-31414
22/02/2023	5.5	5.5	Elastic Kibana URL Redirect	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-38779