{"id":10441,"date":"2025-03-18T13:54:09","date_gmt":"2025-03-18T18:54:09","guid":{"rendered":"https:\/\/beaconlab.us\/?post_type=publicacion&#038;p=10441"},"modified":"2025-03-18T14:15:18","modified_gmt":"2025-03-18T19:15:18","slug":"alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/","title":{"rendered":"Alerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Producto(s) afectado(s):&nbsp;<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Kibana:<\/strong><\/li>\n\n\n\n<li>Versiones 8.15.0 a 8.17.0: explotable por usuarios con el rol &#8216;Viewer&#8217;\u200b<\/li>\n\n\n\n<li>Versiones 8.17.1 y 8.17.2: explotable por usuarios con privilegios espec\u00edficos:\u200b\u00a0&#8216;fleet-all&#8217;, &#8216;integrations-all&#8217;, &#8216;actions:execute-advanced-connectors&#8217;.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Descripci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Se ha identificado una vulnerabilidad cr\u00edtica en Kibana, designada como CVE-2025-25015, con una puntuaci\u00f3n CVSS de 9.9. Esta vulnerabilidad surge de un problema de contaminaci\u00f3n de Object.prototype del JavaScript (Prototype pollution attack) que puede ser explotado mediante la carga de archivos especialmente dise\u00f1ados y solicitudes HTTP espec\u00edficas. La explotaci\u00f3n exitosa permite a los atacantes ejecutar c\u00f3digo arbitrario en los sistemas afectados.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La vulnerabilidad surge debido a una&nbsp;<strong>mala sanitizaci\u00f3n y validaci\u00f3n de entradas<\/strong>&nbsp;dentro del m\u00f3dulo de integraci\u00f3n de Kibana. Un atacante autenticado con ciertos privilegios puede enviar cargas \u00fatiles dise\u00f1adas espec\u00edficamente para manipular&nbsp;<strong>objetos JavaScript y sus prototipos<\/strong>, lo que puede provocar una&nbsp;<strong>modificaci\u00f3n involuntaria de las estructuras internas de datos<\/strong>&nbsp;de la aplicaci\u00f3n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">El ataque implica:<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>Carga de archivos maliciosos<\/strong>\u00a0en Kibana con contenido dise\u00f1ado para explotar el fallo de contaminaci\u00f3n de prototipos.<\/li>\n\n\n\n<li><strong>Env\u00edo de solicitudes HTTP especialmente manipuladas<\/strong>\u00a0que pueden aprovechar el fallo para ejecutar c\u00f3digo arbitrario en el servidor de Kibana.<\/li>\n\n\n\n<li><strong>Escalada de privilegios y persistencia<\/strong>\u00a0mediante la manipulaci\u00f3n de objetos internos para acceder a funciones restringidas de Kibana o modificar su comportamiento normal.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Este problema puede ser utilizado por atacantes para&nbsp;<strong>ejecutar comandos en el sistema operativo subyacente<\/strong>, tomar control del servidor Kibana y potencialmente afectar a otros sistemas en el entorno donde Kibana est\u00e9 desplegado.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\">Mitigaci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Como medida adicional, se puede&nbsp;<strong>deshabilitar temporalmente el Asistente de Integraci\u00f3n<\/strong>&nbsp;agregando la configuraci\u00f3n&nbsp;<strong>xpack.integration_assistant.enabled: false<\/strong>&nbsp;en el archivo kibana.yml. Adem\u00e1s, se aconseja&nbsp;<strong>limitar los privilegios de los usuarios en Kibana y Elasticsearch<\/strong>, asegur\u00e1ndose de que solo los roles estrictamente necesarios tengan acceso a funciones cr\u00edticas. Como medida adicional, se deben&nbsp;<strong>monitorear los registros de Kibana y Elasticsearch<\/strong>&nbsp;en busca de actividad sospechosa que pueda indicar intentos de explotaci\u00f3n.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Soluci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Para solucionar esto, se recomienda&nbsp;<strong>actualizar inmediatamente a la versi\u00f3n 8.17.3&nbsp;<\/strong>donde se ha abordado esta vulnerabilidad de Kibana.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Para m\u00e1s informaci\u00f3n sobre la actualizaci\u00f3n y ver cual actualizaci\u00f3n se aplica a cada versi\u00f3n vulnerable, puede dirigirse al siguiente enlace:&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.elastic.co\/guide\/en\/kibana\/current\/upgrade.html\">Upgrade Kibana | Kibana Guide [8.17] | Elastic<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Informaci\u00f3n adicional:<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/discuss.elastic.co\/t\/kibana-8-17-3-security-update-esa-2025-06\/375441\">Kibana 8.17.3 Security Update (ESA-2025-06) &#8211; Announcements \/ Security Announcements &#8211; Discuss the Elastic Stack<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/securityonline.info\/cve-2025-25015-cvss-9-9-critical-code-execution-vulnerability-patched-in-elastic-kibana\/\">CVE-2025-25015 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/cert.europa.eu\/publications\/security-advisories\/2025-007\/\">CERT-EU &#8211; Critical Vulnerability in Kibana<\/a><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"featured_media":10478,"template":"","class_list":["post-10441","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":{"activar_pdf_link":true,"pdf":10442,"numero_de_boletin":"17","traffic_light_protocol":"White"},"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.9 - aioseo.com -->\n\t<meta name=\"description\" content=\"Producto(s) afectado(s): Kibana: Versiones 8.15.0 a 8.17.0: explotable por usuarios con el rol &#039;Viewer&#039;\u200b Versiones 8.17.1 y 8.17.2: explotable por usuarios con privilegios espec\u00edficos:\u200b &#039;fleet-all&#039;, &#039;integrations-all&#039;, &#039;actions:execute-advanced-connectors&#039;. Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en Kibana, designada como CVE-2025-25015, con una puntuaci\u00f3n CVSS de 9.9. Esta vulnerabilidad surge de un problema de contaminaci\u00f3n de Object.prototype del\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.9\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada - Beacon Lab\" \/>\n\t\t<meta property=\"og:description\" content=\"Producto(s) afectado(s): Kibana: Versiones 8.15.0 a 8.17.0: explotable por usuarios con el rol &#039;Viewer&#039;\u200b Versiones 8.17.1 y 8.17.2: explotable por usuarios con privilegios espec\u00edficos:\u200b &#039;fleet-all&#039;, &#039;integrations-all&#039;, &#039;actions:execute-advanced-connectors&#039;. Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en Kibana, designada como CVE-2025-25015, con una puntuaci\u00f3n CVSS de 9.9. Esta vulnerabilidad surge de un problema de contaminaci\u00f3n de Object.prototype del\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/03\/png-clipart-logo-kibana-elasticsearch-kiba-text-presentation.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/03\/png-clipart-logo-kibana-elasticsearch-kiba-text-presentation.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"900\" \/>\n\t\t<meta property=\"og:image:height\" content=\"411\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-03-18T18:54:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-03-18T19:15:18+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada - Beacon Lab\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Producto(s) afectado(s): Kibana: Versiones 8.15.0 a 8.17.0: explotable por usuarios con el rol &#039;Viewer&#039;\u200b Versiones 8.17.1 y 8.17.2: explotable por usuarios con privilegios espec\u00edficos:\u200b &#039;fleet-all&#039;, &#039;integrations-all&#039;, &#039;actions:execute-advanced-connectors&#039;. Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en Kibana, designada como CVE-2025-25015, con una puntuaci\u00f3n CVSS de 9.9. Esta vulnerabilidad surge de un problema de contaminaci\u00f3n de Object.prototype del\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/03\/png-clipart-logo-kibana-elasticsearch-kiba-text-presentation.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\\\/#listItem\",\"name\":\"Alerta 2025-17 Vulnerabilidad Cr\\u00edtica en Elastic Kibana parcheada\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\\\/#listItem\",\"position\":2,\"name\":\"Alerta 2025-17 Vulnerabilidad Cr\\u00edtica en Elastic Kibana parcheada\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\\\/\",\"name\":\"Alerta 2025-17 Vulnerabilidad Cr\\u00edtica en Elastic Kibana parcheada - Beacon Lab\",\"description\":\"Producto(s) afectado(s): Kibana: Versiones 8.15.0 a 8.17.0: explotable por usuarios con el rol 'Viewer'\\u200b Versiones 8.17.1 y 8.17.2: explotable por usuarios con privilegios espec\\u00edficos:\\u200b 'fleet-all', 'integrations-all', 'actions:execute-advanced-connectors'. Descripci\\u00f3n Se ha identificado una vulnerabilidad cr\\u00edtica en Kibana, designada como CVE-2025-25015, con una puntuaci\\u00f3n CVSS de 9.9. Esta vulnerabilidad surge de un problema de contaminaci\\u00f3n de Object.prototype del\",\"inLanguage\":\"es-ES\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/png-clipart-logo-kibana-elasticsearch-kiba-text-presentation.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\\\/#mainImage\",\"width\":900,\"height\":411},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\\\/#mainImage\"},\"datePublished\":\"2025-03-18T13:54:09-06:00\",\"dateModified\":\"2025-03-18T14:15:18-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"es-ES\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada - Beacon Lab","description":"Producto(s) afectado(s): Kibana: Versiones 8.15.0 a 8.17.0: explotable por usuarios con el rol 'Viewer'\u200b Versiones 8.17.1 y 8.17.2: explotable por usuarios con privilegios espec\u00edficos:\u200b 'fleet-all', 'integrations-all', 'actions:execute-advanced-connectors'. Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en Kibana, designada como CVE-2025-25015, con una puntuaci\u00f3n CVSS de 9.9. Esta vulnerabilidad surge de un problema de contaminaci\u00f3n de Object.prototype del","canonical_url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/es\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/#listItem","name":"Alerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/#listItem","position":2,"name":"Alerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/es\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/es\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/#webpage","url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/","name":"Alerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada - Beacon Lab","description":"Producto(s) afectado(s): Kibana: Versiones 8.15.0 a 8.17.0: explotable por usuarios con el rol 'Viewer'\u200b Versiones 8.17.1 y 8.17.2: explotable por usuarios con privilegios espec\u00edficos:\u200b 'fleet-all', 'integrations-all', 'actions:execute-advanced-connectors'. Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en Kibana, designada como CVE-2025-25015, con una puntuaci\u00f3n CVSS de 9.9. Esta vulnerabilidad surge de un problema de contaminaci\u00f3n de Object.prototype del","inLanguage":"es-ES","isPartOf":{"@id":"https:\/\/beaconlab.us\/es\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/03\/png-clipart-logo-kibana-elasticsearch-kiba-text-presentation.png","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/#mainImage","width":900,"height":411},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/#mainImage"},"datePublished":"2025-03-18T13:54:09-06:00","dateModified":"2025-03-18T14:15:18-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/es\/#website","url":"https:\/\/beaconlab.us\/es\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"es-ES","publisher":{"@id":"https:\/\/beaconlab.us\/es\/#organization"}}]},"og:locale":"es_ES","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada - Beacon Lab","og:description":"Producto(s) afectado(s): Kibana: Versiones 8.15.0 a 8.17.0: explotable por usuarios con el rol 'Viewer'\u200b Versiones 8.17.1 y 8.17.2: explotable por usuarios con privilegios espec\u00edficos:\u200b 'fleet-all', 'integrations-all', 'actions:execute-advanced-connectors'. Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en Kibana, designada como CVE-2025-25015, con una puntuaci\u00f3n CVSS de 9.9. Esta vulnerabilidad surge de un problema de contaminaci\u00f3n de Object.prototype del","og:url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/03\/png-clipart-logo-kibana-elasticsearch-kiba-text-presentation.png","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/03\/png-clipart-logo-kibana-elasticsearch-kiba-text-presentation.png","og:image:width":900,"og:image:height":411,"article:published_time":"2025-03-18T18:54:09+00:00","article:modified_time":"2025-03-18T19:15:18+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada - Beacon Lab","twitter:description":"Producto(s) afectado(s): Kibana: Versiones 8.15.0 a 8.17.0: explotable por usuarios con el rol 'Viewer'\u200b Versiones 8.17.1 y 8.17.2: explotable por usuarios con privilegios espec\u00edficos:\u200b 'fleet-all', 'integrations-all', 'actions:execute-advanced-connectors'. Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en Kibana, designada como CVE-2025-25015, con una puntuaci\u00f3n CVSS de 9.9. Esta vulnerabilidad surge de un problema de contaminaci\u00f3n de Object.prototype del","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2025\/03\/png-clipart-logo-kibana-elasticsearch-kiba-text-presentation.png"},"aioseo_meta_data":{"post_id":"10441","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2025-03-18 18:54:10","updated":"2025-09-24 06:37:46","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/es\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/es\/"},{"label":"Alerta 2025-17 Vulnerabilidad Cr\u00edtica en Elastic Kibana parcheada","link":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2025-17-vulnerabilidad-critica-en-elastic-kibana-parcheada\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/10441","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":1,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/10441\/revisions"}],"predecessor-version":[{"id":10444,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/10441\/revisions\/10444"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/media\/10478"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/media?parent=10441"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}