CVE-2022-23709
N/A
N/A
Summary
A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this privilege could not modify alerting connectors. This effectively means that Read users could disable existing alerting rules.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Elastic | kibana | Versions 7.7.0 through 7.17.0, and 8.0.0 | affected |
Weaknesses
- CWE-264: CWE-264
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.