A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this privilege could not modify alerting connectors. This effectively means that Read users could disable existing alerting rules.

According to its self-reported version number, the Kibana application running on the remote host is 7.7.0 prior to 7.17.1 or 8.0.0. It is, therefore, affected by :

- A missing authorization issue in which users with read access to the Uptime feature could modify alerting rules (CVE-2022-23709)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
113517	Kibana 8.0.0 Insufficient Authorization	Web App Scanning	Component Vulnerability	Version Based	medium
113516	Kibana 7.7.0 < 7.17.1 Insufficient Authorization	Web App Scanning	Component Vulnerability	Version Based	medium

Detections

Analytics

CVE-2022-23709

medium

Tenable Plugins

medium

medium