medium6.5
CVE-2017-8447
An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement.
Impact
An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has either 'delete' or 'index' permissions on an index in a cluster, they may be able to issue both delete and index requests against that index.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | X-Pack | Versions 5.3.0, 5.3.1, 5.3.2, 5.3.3, 5.4.0, 5.5.0 |