Skip to content
OpenAdvisories

Package · Maven

org.elasticsearch.plugin:x-pack

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2017-8446

    Improper Privilege Management in X-Pack

    The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reporting_user role could execute a report with the permissions of another reportin…

    Elastic Elastic X-Pack Reporting org.elasticsearch.plugin:x-pack Maven