CVE-2017-8441

MEDIUM · CVSS 4.3 EPSS 0.73%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-06-05 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-8441

Severity

MEDIUM

CVSS

4.3

EPSS

0.73%

Original Filing — NVD Description

Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to index aliases. This bug could allow a user with restricted permissions to view data they should not have access to when performing certain operations against an index alias.