Description
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Kibana | 8.0.0 – ≤ 8.19.20, 9.0.0 – ≤ 9.4.5, 9.5.0 – ≤ 9.5.2 | — |
Advisories 1
- WID-SEC-2026-3177 Kibana: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 3, 2026