VYPR
Get started
← All advisories
Medium severity5.9NVD Advisory· Published Jun 16, 2017· Updated May 13, 2026

CVE-2017-8449

CVE-2017-8449

Description

X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules used a mix of grant and exclude rules when merging multiple rules with field level security rules for the same index.

Affected products

2
  • Elastic/X Pack
    cpe:2.3:a:elastic:x-pack:*:*:*:*:*:*:*:*
    Range: >=5.2.0,<=5.2.2
  • Elastic/Elastic X-Pack Securityv5
    Range: before 5.3.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.