Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um vertrauliche Informationen einschließlich Zugangsdaten offenzulegen, Daten und Konfigurationen zu manipulieren, Berechtigungen zu umgehen und einen Denial of Service zu verursachen.
[UPDATE] [hoch] Kibana: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-08-14 08:51 UTC
- Importiert: 2026-08-17 09:27 UTC
- CVSS: 8.1
- Quelle-ID:
cert_bund - uid_hash:
e30e7c0435b500d9e323bcb0578743b754cab73ff0c66325968d353dfb8286c4
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
8.1 |
HIGH |
7.1 |
2026-08-13 |
|||
HIGH |
8.1 |
HIGH |
7.1 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.5 |
2026-08-13 |
|||
HIGH |
8.1 |
HIGH |
7.1 |
2026-08-13 |
|||
HIGH |
8.1 |
HIGH |
7.1 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
4.3 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.5 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
4.3 |
2026-08-13 |
|||
HIGH |
8.1 |
HIGH |
7.3 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.5 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.5 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.5 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.5 |
2026-08-13 |
|||
HIGH |
8.1 |
HIGH |
8.1 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.8 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.5 |
2026-08-13 |
|||
HIGH |
8.1 |
HIGH |
7.6 |
2026-08-13 |
|||
HIGH |
8.1 |
HIGH |
7.7 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
4.3 |
2026-08-13 |
|||
HIGH |
8.1 |
HIGH |
7.7 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
5.4 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.5 |
2026-08-13 |
|||
HIGH |
8.1 |
HIGH |
7.1 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.5 |
2026-08-13 |
|||
HIGH |
8.1 |
MEDIUM |
6.5 |
2026-08-13 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |