Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote cluster(s).
CVSS Information
N/A
Vulnerability Type
授权机制不恰当
Vulnerability Title
floragunn Search Guard 授权问题漏洞
Vulnerability Description
floragunn Search Guard是德国floragunn公司的一款用于Elasticsearch和ELK的开源插件，它主要提供加密、身份验证、授权管理和日志审计等功能。 floragunn Search Guard 24.3之前版本中存在授权问题漏洞。该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。
CVSS Information
N/A
Vulnerability Type
N/A