CVE-2017-8450

2017-06-1621:00:00

CWE-732

elastic

www.cve.org

0.002 Low

EPSS

Percentile

55.9%

JSON

X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field may have been able to access this information.

CNA Affected

[
  {
    "product": "Elastic X-Pack Security",
    "vendor": "Elastic",
    "versions": [
      {
        "status": "affected",
        "version": "5.1.1"
      }
    ]
  }
]

References

www.elastic.co/community/security

0.002 Low

EPSS

Percentile

55.9%

JSON

Related for CVELIST:CVE-2017-8450