VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 3, 2022· Updated Jun 17, 2026

CVE-2022-23709

CVE-2022-23709

Description

A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this privilege could not modify alerting connectors. This effectively means that Read users could disable existing alerting rules.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Elastic/Kibana4 versions
    cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*range: >=7.7.0,<7.17.1
    • cpe:2.3:a:elastic:kibana:8.0.0:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: Versions 7.7.0 through 7.17.0, and 8.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.