Security Advisory
CVE-2024-12539
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.