Elastic X-Pack Alerting vulnerabilities

1 known vulnerability affecting elastic/elastic_x-pack_alerting.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2017-8448HIGHCVSS 8.8v5.0.0 to 5.6.02017-09-29

CVE-2017-8448 [HIGH] CWE-284 CVE-2017-8448: An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapp An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that results in that user gaining elevated privileges.