Elastic Cloud Enterprise (ECE) 4.2.1 Security Update (ESA-2026-222)
Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to unauthorized read and write access to data of other deployments on the same host via Symlink Attack (CAPEC-132). Affected Versions: 4.x: All versions from 4.1.0 up to and including 4.2.0 Users on the 3.x release line, including 3.8.x, and on 4.0.x are not affected. The functionality that contains this vulnerability was introdu…
Elastic Security Announcements에서 읽기
| 정보원 | Elastic Security Announcements |
|---|---|
| 수집 시각 | 2026. 10. 29. 오후 07:49 |
| 데이터 | Markdown JSON |
2026. 10. 29. 오후 07:47, Elastic Security Announcements에서 "Elastic Cloud Enterprise (ECE) 4.2.1 Security Update (ESA-2026-222)"을(를) 게시했습니다 (유형: 취약점 권고). 관련 기술: Elasticsearch / OpenSearch.