description: Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.
problem types: CWE-280: Improper Handling of Insufficient Permissions or Privileges
affected:
{
product: Search Guard
vendor: floragunn
versions:
status: affected, version: before 24.3
}