CVE-2021-22136

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-22136
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22136.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-22136
Published
2021-05-13T18:15:08.993Z
Modified
2026-02-04T05:21:13.045084Z
Severity
  • 3.5 (Low) CVSS_V3 - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.session.idleTimeout setting is not being respected. This was caused by background polling activities unintentionally extending authenticated users sessions, preventing a user session from timing out.

References

Affected packages

Git / github.com/elastic/elasticsearch

Affected ranges

Type
GIT
Repo
https://github.com/elastic/elasticsearch
Events
Introduced
b7e28a7232616c7a21bc879a535d801b8553ba77
Fixed
78722783c38caa25a70982b5b042074cde5d3b3a
Fixed
c9a8c60f59a902dfa018abda97b195f7ba9f29aa

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22136.json"

Git / github.com/elastic/kibana

Affected ranges

Type
GIT
Repo
https://github.com/elastic/kibana
Events
Introduced
ee89fda8a17eff9c93f7400c102edf76cb4d7d8a
Fixed
b7f9a41f486a2910ef22a1274ec734219c35ca3e
Fixed
dd7258ddc9c294cb93a248c2fa0d09e886596d91

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22136.json"