Threats tagged 'ghsa-vr5j-v5qj-vvp7'

Elastic Cloud Enterprise (ECE) suffers from an improper link resolution vulnerability (CWE-59) that allows unauthorized read and write access to data of other deployments on the same host via a symlink attack. This vulnerability can lead to significant confidentiality, integrity, and availability impacts.