Elastic Kibana Improper Authorization Vulnerability Allowing Privilege Escalation

A vulnerability in Kibana related to improper authorization can lead to privilege escalation. This issue allows an authenticated user to bypass permission restrictions through a crafted HTTP request. As a result, an attacker without the 'live queries - read' permission can retrieve the list of live queries. The vulnerability affects all versions of Kibana 7.x, as well as versions 8.0.0 prior to 8.19.6 and versions 9.0.0 prior to 9.1.6 and 9.2.0.

Impact

Exploitation of this vulnerability could allow an authenticated user to gain unauthorized access to live query data, potentially leading to further privilege escalation or exploitation within the application.

Remediation

Users can upgrade to Kibana versions 8.19.7, 9.1.7, or 9.2.1 to address this vulnerability.