Description
Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.
Remediation
References
https://discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344
https://security.netapp.com/advisory/ntap-20211008-0002/
https://www.elastic.co/community/security/
Related Vulnerabilities
CVE-2022-3510 Vulnerability in maven package com.google.protobuf:protobuf-javalite
CVE-2023-39153 Vulnerability in maven package org.jenkins-ci.plugins:gitlab-oauth
CVE-2020-16023 Vulnerability in npm package electron
CVE-2023-38504 Vulnerability in npm package sails
CVE-2023-22467 Vulnerability in maven package org.webjars.npm:luxon