CVE-2021-22136
13.05.2021, 18:15
In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.session.idleTimeout setting is not being respected. This was caused by background polling activities unintentionally extending authenticated users sessions, preventing a user session from timing out.Enginsight
| Vendor | Product | Version |
|---|---|---|
| elastic | kibana | 𝑥 < 6.8.15 |
| elastic | kibana | 7.0.0 ≤ 𝑥 < 7.12.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration