CVE-2017-8447

2017-09-2819:00:00

CWE-284

elastic

www.cve.org

0.001 Low

EPSS

Percentile

21.7%

JSON

An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has either ‘delete’ or ‘index’ permissions on an index in a cluster, they may be able to issue both delete and index requests against that index.

CNA Affected

[
  {
    "product": "Elastic X-Pack Security",
    "vendor": "Elastic",
    "versions": [
      {
        "status": "affected",
        "version": "5.3.0 to 5.5.2"
      }
    ]
  }
]

References

discuss.elastic.co/t/x-pack-security-5-6-0-and-5-5-3-security-update/100089

0.001 Low

EPSS

Percentile

21.7%

JSON

Related for CVELIST:CVE-2017-8447