Clear Dev Tools when logging out a user with X-Pack installed to Kibana #17658
Labels
Feature:Console
Dev Tools Console Feature
impact:low
Addressing this issue will have a low level of impact on the quality/strength of our product.
loe:small
Small Level of Effort
Team:Kibana Management
Dev Tools, Index Management, Upgrade Assistant, ILM, Ingest Node Pipelines, and more
When logging out a user from Kibana and then logging in as a different user using the same Browser, "Dev Tools" exposes any commands cached from the previous user. Even though the new user may not have privileges to run these commands, there still exists potential for inadvertent disclosure of information, hence the security tag. While it is really useful in a single-user scenario to have that cache, I'd suggest some (configurable) mechanism to be able to clear this.
The text was updated successfully, but these errors were encountered: