一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-78584 [MEDIUM] – Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to inform

未分类
📑 文章目录

Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query System for Information (CAPEC-54). An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are not authorized to access.