Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wx3g-r3fp-jg5g

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules used a mix of grant and exclude rules when merging multiple rules with field level security rules for the same index.

X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules used a mix of grant and exclude rules when merging multiple rules with field level security rules for the same index.

EPSS

Процентиль: 49%
0.00262
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-200
CWE-732

Связанные уязвимости

CVSS3: 5.9
nvd
больше 8 лет назад

X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules used a mix of grant and exclude rules when merging multiple rules with field level security rules for the same index.

EPSS

Процентиль: 49%
0.00262
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-200
CWE-732