What the vulnerability does
01Description
Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote cluster(s).
CVSS base score
—
Key dates
02Disclosure timeline
August 13, 2019
CVE published
August 4, 2024
Record updated
External resources
03References
Related vulnerabilities
