Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-23447 EUVD-2024-20950GHSA-p6wv-4394-73p5

Elastic Network Drive Connector Improper Access Control

Published Feb 7, 2024 · Updated Apr 24, 2025 · Assigned by elastic

Description

An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user.

Affected products

VendorProductAffectedFixed
Elastic Elastic Network Drive Connector 8.11.0 – < 8.12.1 8.12.1

References