Vulnerabilities
CVE-2025-68422 - Kibana Improper Authorization
CVE ID : CVE-2025-68422 Published : Dec. 18, 2025, 11:15 p.m. | 37 minutes ago Description : Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to bypass intended permission restrictions via a crafted HTTP request. This allows an attacker who lacks the live queries - read permission to successfully retrieve the list of live queries. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Affected Product:
Kibana
CWE:
CWE-285
Impact:
privilege escalation
Source: Telegram CVE Monitor