CyberRota Analysis
AI-GeneratedThe Kibana Entity Store feature has a vulnerability that allows low-privilege authenticated users to create Elasticsearch API keys, bypassing necessary access controls. This could lead to unauthorized credential creation, potentially compromising the integrity of the Elasticsearch cluster. Organizations using Kibana should prioritize addressing this issue to prevent exploitation by malicious insiders or compromised accounts.
Original NVD Description
Missing Authorization (CWE-862) in the Kibana Entity Store feature can lead to unauthorized credential creation via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user holding only low-privilege Security feature access could invoke an administrative operation that creates and persists Elasticsearch API keys under the caller's identity, bypassing the elevated cluster and Kibana privileges that the documented Entity Store setup flow requires.
Related CVEs
Other vulnerabilities affecting the same vendor(s)