Elasticsearch/Kibana Privilege Escalation Vulnerabilities (CVE-2023-25673 to 25690) Fix Advisory

From this webpage screenshot, the following key vulnerability information can be obtained: 7.14.x Releases 7.14.7 Security - CVE-2023-25689: Potential for privilege escalation in the role. - CVE-2023-25690: Potential for privilege escalation in the role. 7.14.6 Security - CVE-2023-25687: Potential for privilege escalation in the role. - CVE-2023-25688: Potential for privilege escalation in the role. 7.14.5 Security - CVE-2023-25685: Potential for privilege escalation in the role. - CVE-2023-25686: Potential for privilege escalation in the role. 7.13.x Releases 7.13.12 Security - CVE-2023-25683: Potential for privilege escalation in the role. - CVE-2023-25684: Potential for privilege escalation in the role. 7.13.11 Security - CVE-2023-25681: Potential for privilege escalation in the role. - CVE-2023-25682: Potential for privilege escalation in the role. 7.13.10 Security - CVE-2023-25679: Potential for privilege escalation in the role. - CVE-2023-25680: Potential for privilege escalation in the role. 7.12.x Releases 7.12.17 Security - CVE-2023-25677: Potential for privilege escalation in the role. - CVE-2023-25678: Potential for privilege escalation in the role. 7.12.16 Security - CVE-2023-25675: Potential for privilege escalation in the role. - CVE-2023-25676: Potential for privilege escalation in the role. 7.12.15 Security - CVE-2023-25673: Potential for privilege escalation in the role. - CVE-2023-25674: Potential for privilege escalation in the role. These CVE numbers and descriptions indicate the presence of potential privilege escalation vulnerabilities in various versions of Elasticsearch and Kibana. It is recommended to update to the latest version promptly to address these security issues.

Goal Reached Thanks to every supporter — we hit 100%!

Elasticsearch/Kibana Privilege Escalation Vulnerabilities (CVE-2023-25673 to 25690) Fix Advisory