Количество 6
Количество 6
CVE-2024-12539
An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.
CVE-2024-12539
An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.
CVE-2024-12539
An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.
CVE-2024-12539
An issue was discovered where improper authorization controls affected ...
GHSA-5mpw-4546-2wcr
Elasticsearch Incorrect Authorization vulnerability
BDU:2025-00489
Уязвимость поисковой системы Elasticsearch, связанная с неправильной авторизацией, позволяющая нарушителю получить доступ к защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-12539 An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow. | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
CVE-2024-12539 An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow. | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
CVE-2024-12539 An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow. | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
CVE-2024-12539 An issue was discovered where improper authorization controls affected ... | CVSS3: 6.5 | 0% Низкий | около 1 года назад | |
GHSA-5mpw-4546-2wcr Elasticsearch Incorrect Authorization vulnerability | 0% Низкий | около 1 года назад | ||
BDU:2025-00489 Уязвимость поисковой системы Elasticsearch, связанная с неправильной авторизацией, позволяющая нарушителю получить доступ к защищаемой информации | CVSS3: 4.3 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу