CVE-2024-12539: Elasticsearch Incorrect Authorization
An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12539?
CVE-2024-12539 is considered a critical vulnerability due to its potential to allow unauthorized access to sensitive documents.
How do I fix CVE-2024-12539?
To mitigate CVE-2024-12539, upgrade to Elasticsearch version 8.16.2 or later.
What are the risks associated with CVE-2024-12539?
The risks include the unauthorized access of documents that should be protected by Document Level Security, which could lead to data breaches.
Which versions of Elasticsearch are affected by CVE-2024-12539?
CVE-2024-12539 affects Elasticsearch versions from 8.16.0 to 8.16.2.
Can CVE-2024-12539 be exploited remotely?
Yes, CVE-2024-12539 can be exploited remotely by malicious actors through specific queries.