Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34570
HistoryMar 09, 2022 - 3:47 a.m.

Privilege Escalation

2022-03-0903:47:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1441

0.001 Low

EPSS

Percentile

22.7%

elasticsearch is vulnerable to privilege escalation. An attacker can disable the in-built protections on the security index, leading to access to the current index with * index permission.

CPENameOperatorVersion
serverle7.17.0
serverle7.17.0

0.001 Low

EPSS

Percentile

22.7%