Описание
A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “*” index permissions access to this index.
| Релиз | Статус | Примечание |
|---|---|---|
| esm-apps-legacy/xenial | needed | |
| esm-apps/xenial | ignored | end of ESM support, was needed |
| trusty | DNE | |
| upstream | needs-triage | |
| xenial | ignored | end of standard support |
Показывать по
4 Medium
CVSS2
4.3 Medium
CVSS3
Связанные уязвимости
A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “*” index permissions access to this index.
A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “*” index permissions access to this index.
A flaw was discovered in Elasticsearch 7.17.0\u2019s upgrade assistant ...
4 Medium
CVSS2
4.3 Medium
CVSS3