Volerion logoVolerion
Volerion logoVolerion

Elastic Kibana CrowdStrike Connector Insufficiently Protected Credentials Vulnerability

Vulnerability

A vulnerability exists in the CrowdStrike connector for Elastic Kibana, specifically in versions 7.x prior to 7.17.29, 8.x from 8.14.0 up to 8.18.7, 8.19.x from 8.19.0 up to 8.19.4, 9.0.x from 9.0.0 up to 9.0.7, and 9.1.x from 9.1.0 up to 9.1.4. This vulnerability allows for the leakage of CrowdStrike credentials. A malicious user can access cached credentials from a CrowdStrike connector in one space by creating and running a connector in another space to which they have access.

Impact

Exploitation of this vulnerability could lead to unauthorized access to cached CrowdStrike credentials from a connector in a different space.

Remediation

Users can upgrade to CrowdStrike connector versions 8.18.8, 8.19.5, 9.0.8, or 9.1.5. For users unable to upgrade, no workarounds are available.

Added: Oct 7, 2025, 2:27 PM
Updated: Oct 7, 2025, 6:59 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
5.2
remediation
7.7
relevance
0.7
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.