CVE-2024-37279 — Kibana Broken Access Control issue
A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule run continuously, potentially affecting the system availab…
Published: 2024-06-13 · CVSS: 4.3 · CVSS 3.1
A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule run continuously, potentially affecting the system availability if the alerting rule is running complex queries.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7