Логотип exploitDog
bind:CVE-2024-12539
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-12539

Количество 6

Количество 6

ubuntu логотип

CVE-2024-12539

около 1 года назад

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2024-12539

около 1 года назад

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2024-12539

около 1 года назад

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2024-12539

около 1 года назад

An issue was discovered where improper authorization controls affected ...

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-5mpw-4546-2wcr

около 1 года назад

Elasticsearch Incorrect Authorization vulnerability

EPSS: Низкий
fstec логотип

BDU:2025-00489

около 1 года назад

Уязвимость поисковой системы Elasticsearch, связанная с неправильной авторизацией, позволяющая нарушителю получить доступ к защищаемой информации

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-12539

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.

CVSS3: 6.5
0%
Низкий
около 1 года назад
redhat логотип
CVE-2024-12539

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.

CVSS3: 6.5
0%
Низкий
около 1 года назад
nvd логотип
CVE-2024-12539

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.

CVSS3: 6.5
0%
Низкий
около 1 года назад
debian логотип
CVE-2024-12539

An issue was discovered where improper authorization controls affected ...

CVSS3: 6.5
0%
Низкий
около 1 года назад
github логотип
GHSA-5mpw-4546-2wcr

Elasticsearch Incorrect Authorization vulnerability

0%
Низкий
около 1 года назад
fstec логотип
BDU:2025-00489

Уязвимость поисковой системы Elasticsearch, связанная с неправильной авторизацией, позволяющая нарушителю получить доступ к защищаемой информации

CVSS3: 4.3
0%
Низкий
около 1 года назад

Уязвимостей на страницу