Description (CNA)
Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked. A malicious user can access cached credentials from a Crowdstrike connector in another space by creating and running a Crowdstrike connector in a space to which they have access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Elastic / Kibana | affected 7.0.0 through 7.17.29; affected 8.14.0 through 8.18.7; affected 8.19.0 through 8.19.4; affected 9.0.0 through 9.0.7; affected 9.1.0 through 9.1.4 |
CWE
CWE-522
References
ADP enrichment
No English description supplied.