Threats tagged 'ghsa-mj54-9pv2-7pc5'

In Search Guard FLX versions 3.1.2 and earlier, Document-Level Security (DLS) is not enforced when searches are triggered from a Signal's watch, allowing unauthorized access to all documents in the queried indices. This vulnerability affects the confidentiality of data by bypassing intended access controls in this specific context.