Elasticsearch permission permission and access control issues vulnerability

Elasticsearch is a set of open source distributed RESTful search engine built on Lucene from the Dutch company Elasticsearch. The product is mainly used in cloud computing and supports data indexing using JSON over HTTP. Elasticsearch is vulnerable to privilege permission and access control issues, which can be exploited by attackers to bypass Elasticsearch’s access restrictions via an upgrade assistant to read or change data.