Security issue with cross-cluster API key not enforcing search restrictions for replication, affecting API key based security model for remote clusters in Elasticsearch 8.14.0
Reporter | Title | Published | Views | Family All 13 |
---|---|---|---|---|
![]() | CVE-2024-23445 | 6 Jun 202411:03 | – | redhatcve |
![]() | CVE-2024-23445 | 12 Jun 202414:15 | – | osv |
![]() | CGA-QWP2-RQGG-FP92 | 19 Jun 202413:06 | – | osv |
![]() | BIT-ELASTICSEARCH-2024-23445 | 17 Jun 202407:18 | – | osv |
![]() | UBUNTU-CVE-2024-23445 | 12 Jun 202414:15 | – | osv |
![]() | CGA-MQRC-22G9-96VG | 19 Jun 202413:04 | – | osv |
![]() | Information Disclosure | 13 Jun 202406:33 | – | veracode |
![]() | CVE-2024-23445 Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions | 12 Jun 202413:58 | – | cvelist |
![]() | CVE-2024-23445 Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions | 12 Jun 202413:58 | – | vulnrichment |
![]() | CVE-2024-23445 vulnerabilities | 12 Jun 202414:15 | – | cgr |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo