Skip to content

Vulnerabilities of Elastic X-Pack Security

Is your version affected?

CVE Summary Score Published
CVE-2018-3822 X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML… Not rated Mar 30, 2018
CVE-2017-8438 Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality Not rated Jun 5, 2017
CVE-2017-8441 Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to… Not rated Jun 5, 2017

Other Elastic products