Vulnerabilidades do Elastic Endpoint Security
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Elastic Endpoint Security: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:elastic:endpoint_security
CVE-2026-56152
Média · 5.3
CWE-863 01/07/2026
Incorrect Authorization in Kibana Leading to Information Disclosure
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain conditions, a low-privileged authenticated user can access response action data that they are not authorized to view.