A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
History

Mon, 19 Aug 2024 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Elastic
Elastic kibana
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*
Vendors & Products Elastic
Elastic kibana

cve-icon MITRE

Status: PUBLISHED

Assigner: elastic

Published: 2024-06-19T13:47:29.166Z

Updated: 2024-08-01T23:06:24.281Z

Reserved: 2024-01-16T21:31:26.029Z

Link: CVE-2024-23443

cve-icon Vulnrichment

Updated: 2024-08-01T23:06:24.281Z

cve-icon NVD

Status : Modified

Published: 2024-06-19T14:15:13.360

Modified: 2024-11-21T08:57:43.147

Link: CVE-2024-23443

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-06-14T00:00:00Z

Links: CVE-2024-23443 - Bugzilla