EUVD-2024-21147

Malicious code in bioql PyPI...

Privilege Escalation

elasticsearch is vulnerable to privilege escalation. An attacker can disable the in-built protections on the security index, leading to access to the current index with index permission...

X-Pack Security 5.6.0 and 5.5.3 security update

X-Pack Security permission issue ESA-2017-18 An error was found in the X-Pack Security privilege enforcement. If a user has either ‘delete’ or ‘index’ permissions on an index in a cluster, they may be able to issue both delete and index requests against that index. Previously if a user had bulk...