Vulnerabilidades do Search-guard Flx

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Search-guard Flx: 3 registro(s), com versões afetadas e correções.
cpe:2.3:a:search-guard:flx

CVE-2026-4819 Média · 6.5 CWE-522 31/03/2026

Search Guard audit logs can contain under certain conditions user credentials

In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

CVE-2026-4818 Alta · 8.1 CWE-285 31/03/2026

Some management operations on data streams are not properly restricted when user does not have the necessary privileges

In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams.

CVE-2026-4799 Média · 4.3 CWE-601 31/03/2026

Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests

In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.