Vulnerabilities of Elastic X-Pack Security
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2018-3822 | X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML… | Not rated | Mar 30, 2018 |
| CVE-2017-8438 | Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality | Not rated | Jun 5, 2017 |
| CVE-2017-8441 | Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to… | Not rated | Jun 5, 2017 |