CVE-2017-8441
4.3MEDIUMElastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to index aliases. This bug could allow a user with restricted permissions to view data
게시됨: 6/5/2017업데이트됨: 4/20/2025
설명
Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to index aliases. This bug could allow a user with restricted permissions to view data they should not have access to when performing certain operations against an index alias.
AI 분석AI 기반
영향받는 제품
elasticx-pack
elasticx-pack
참조
- https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952Vendor Advisory
- https://www.elastic.co/blog/elasticsearch-5-4-1-and-5-3-3-releasedRelease NotesVendor Advisory
- https://www.elastic.co/community/securityVendor Advisory
- https://discuss.elastic.co/t/elastic-stack-5-4-1-and-5-3-3-security-updates/87952Vendor Advisory
- https://www.elastic.co/blog/elasticsearch-5-4-1-and-5-3-3-releasedRelease NotesVendor Advisory
- https://www.elastic.co/community/securityVendor Advisory