| Package | Affected versions | Patched versions |
|---|---|---|
| x-pack | = 5.3.0= 5.3.1= 5.3.2= 5.3.3= 5.4.0= 5.5.0= 5.5.2 |
An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has either 'delete' or 'index' permissions on an index in a cluster, they may be able to issue both delete and index requests against that index.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free