CVE-2017-8450

CVE-2017-8450

Vendor Elastic
Product Elastic X-Pack Security
Weakness CWE-732
Published June 16, 2017
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field may have been able to access this information.

Key dates

02Disclosure timeline

June 16, 2017 CVE published
August 5, 2024 Record updated