Description
Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Kibana | 8.12.0 – < 8.12.1 | 8.12.1 |
Advisories 1
- WID-SEC-2025-1302 Kibana: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jun 10, 2025