CVE-2017-8450CWE-732

X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field…

published June 16, 2017

CVSS
—
EPSS
1%
Percentile
57.9
In the wild
Unconfirmed
What it is

X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field may have been able to access this information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00862 · 57.9th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2017-06-16T21:00Z
EPSS history
Timeline
  • 16 JUN 21:00Z
    X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field…
    cvelistv5