Threats tagged 'ghsa-gcm8-h8qh-v555'

A vulnerability in Kibana Observability onboarding allows insertion of sensitive information into sent data, exposing credentials used by Kibana to connect to Elasticsearch. Authenticated users with privileges to onboard Observability data can retrieve these credentials embedded in Elasticsearch host URLs, potentially gaining unauthorized access to Elasticsearch with Kibana service account privileges.