Skip to content
OpenAdvisories
Unscored CVE-2017-8450 EUVD-2017-17400GHSA-h63x-5x88-qfh6

X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a d…

Published Jun 16, 2017 · Updated Aug 5, 2024 · Assigned by elastic

Description

X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field may have been able to access this information.

Affected products

VendorProductAffectedFixed
Elastic Elastic X-Pack Security 5.1.1 —

References