A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.

According to its self-reported version number, the Kibana application running on the remote host is 7.x prior to 7.17.22 or 8.x prior to 8.14.0. It is, therefore, affected by multiples vulnerabilities.

- A high-privileged user, allowed to create custom osquery packs could affect the availability of Kibana by uploading a maliciously crafted osquery pack. - An open redirect that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Kibana installed on the remote host is prior to 7.17.22 or 8.14. It is, therefore, affected by a vulnerability as referenced in the ESA-2024-11 advisory.

  - A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana   by uploading a maliciously crafted osquery pack.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
114640	Kibana 7.x < 7.17.22 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	medium
114639	Kibana 8.x < 8.14.0 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	medium
200798	Kibana < 7.17.22 / 8.0.x < 8.14 (ESA-2024-11)	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2024-23443

medium

Tenable Plugins

medium

medium

medium