Improper Authorization Vulnerability in Kibana by Elastic

CVE-2024-43706

What is CVE-2024-43706?

An improper authorization vulnerability exists in Kibana that may allow attackers to exploit a synthetic monitor endpoint. By sending a direct HTTP request to the endpoint, an unauthorized user could potentially abuse privileges, leading to unauthorized access and manipulation of sensitive data. This highlights the importance of robust access controls in safeguarding against such threats.

References