Advisories · Technology
floragunn Search Guard FLX.
Every CVE that names floragunn Search Guard FLX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Search Guard audit logs can contain under certain conditions user credentials
- floragunn Search Guard FLX
- Hard-coded credentials
- Information disclosure
- CVSS 6.8 Medium
Some management operations on data streams are not properly restricted when user does not have the necessary privileges
- floragunn Search Guard FLX
- Broken access control
- CVSS 4.3 Medium
Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests
- floragunn Search Guard FLX
- Open redirect
- CVSS 4.3 Medium
Unauthorized access to documents in data streams with specially crafted requests
- floragunn Search Guard FLX
- Information disclosure
- Broken access control
- CVSS 6.0 Medium
Unauthorized access to documents protected by Document-Level Security (DLS), when Signals watches include a search query involving protected documents
- floragunn Search Guard FLX
- Information disclosure
- Broken access control
- CVSS 6.0 Medium
Unauthorized access to fields protected by Field Masking (FM) for fields of type IP
- floragunn Search Guard FLX
- Information disclosure
- Broken access control
- CVSS 6.0 Medium
Unauthorized access to fields protected by Field-Level Security (FLS) when those fields are members of an object
- floragunn Search Guard FLX
- Information disclosure
- Broken access control