Lucene search
PRIOn knowledge basePRION:CVE-2021-22136HistoryMay 13, 2021 - 6:15 p.m.
Design/Logic Flaw
2021-05-1318:15:00
PRIOn knowledge base
www.prio-n.com
2
In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.session.idleTimeout setting is not being respected. This was caused by background polling activities unintentionally extending authenticated users sessions, preventing a user session from timing out.
Related
nvd
nvd
CVE-2021-22136
2021-05-13 18:15:08
openvas
openvas
Elastic Kibana Timeout Bypass Vulnerability (ESA-2021-07)
2021-05-14 00:00:00
cvelist
cvelist
CVE-2021-22136
2021-05-13 17:35:17
osv
osv
CVE-2021-22136
2021-05-13 18:15:08
redhatcve
redhatcve
CVE-2021-22136
2021-03-25 15:23:08
cve
cve
CVE-2021-22136
2021-05-13 18:15:08
nessus
nessus
Kibana < 7.12.0 Timeout Bypass
2023-01-11 00:00:00