Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-23447

Elastic Network Drive Connector Improper Access Control

Description

An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Elastic Network Drive Connector

Default version status: unaffected

  • 8.11.0 to < 8.12.1affected

References