Meet Corgea at Black Hat, BSides Las Vegas & DEF CON
UNKNOWN Maven

Elasticsearch Incorrect Authorization vulnerability

GHSA-5mpw-4546-2wcr · BIT-elasticsearch-2024-12539 · CVE-2024-12539

Published · Modified

Description

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.

Ready to move

Start Securing

Free, no credit card | First findings in minutes