https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:37:47 +0000 https://db.gcve.eu/vuln/bit-elk-2026-78596 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege Abuse (CAPEC-122). An authenticated user holding Security read-level access in a single Kibana space could trigger Entity Analytics migration operations that perform privileged writes across all Kibana spaces, regardless of that user&#39;s actual access scope.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege Abuse (CAPEC-122). An authenticated user holding Security read-level access in a single Kibana space could trigger Entity Analytics migration operations that perform privileged writes across all Kibana spaces, regardless of that user&#39;s actual access scope.</p> https://db.gcve.eu/vuln/bit-elk-2026-78596 https://db.gcve.eu/vuln/certfr-2026-avi-1113 certfr-2026-avi-1113 https://db.gcve.eu/vuln/certfr-2026-avi-1113 https://db.gcve.eu/vuln/fkie_cve-2026-78596 <p>Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege Abuse (CAPEC-122). An authenticated user holding Security read-level access in a single Kibana space could trigger Entity Analytics migration operations that perform privileged writes across all Kibana spaces, regardless of that user&#39;s actual access scope.</p> <p>Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege Abuse (CAPEC-122). An authenticated user holding Security read-level access in a single Kibana space could trigger Entity Analytics migration operations that perform privileged writes across all Kibana spaces, regardless of that user&#39;s actual access scope.</p> https://db.gcve.eu/vuln/fkie_cve-2026-78596 https://db.gcve.eu/vuln/ghsa-fcr2-g7h7-m264 <p>Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege Abuse (CAPEC-122). An authenticated user holding Security read-level access in a single Kibana space could trigger Entity Analytics migration operations that perform privileged writes across all Kibana spaces, regardless of that user&#39;s actual access scope.</p> <p>Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege Abuse (CAPEC-122). An authenticated user holding Security read-level access in a single Kibana space could trigger Entity Analytics migration operations that perform privileged writes across all Kibana spaces, regardless of that user&#39;s actual access scope.</p> https://db.gcve.eu/vuln/ghsa-fcr2-g7h7-m264