org.opensearch.plugin:opensearch-security vulnerabilities (Maven)
14 vulnerabilities.
-
org.opensearch.plugin:opensearch-securityMaven OpenSearch has ineffective TLS certificate hostname verification 2.2 Low -
org.opensearch.plugin:opensearch-securityMaven OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation 5.3 Medium -
org.opensearch.plugin:opensearch-securityMaven OpenSearch vulnerable to improper authorization for Rollover Requests 2.2 Low -
org.opensearch.plugin:opensearch-securityMaven OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths 3.7 Low -
org.opensearch.plugin:opensearch-securityMaven OpenSearch unauthorized data access on fields protected by field level security if field is a member of an object 5.7 Medium -
org.opensearch.plugin:opensearch-securityMaven OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape 5.7 Medium -
org.opensearch.plugin:opensearch-securityMaven OpenSearch uncontrolled resource consumption 7.5 High -
org.opensearch.plugin:opensearch-securityMaven OpenSearch Issue with tenant read-only permissions 5.4 Medium -
org.opensearch.plugin:opensearch-securityMaven OpenSearch issue with fine-grained access control during extremely rare race conditions 4.8 Medium -
org.opensearch.plugin:opensearch-securityMaven Time discrepancy in authentication responses in OpenSearch 5.3 Medium -
org.opensearch.plugin:opensearch-securityMaven Issue with whitespace in JWT roles in OpenSearch 4.7 Medium -
org.opensearch.plugin:opensearch-securityMaven Field-level security issue with .keyword fields in OpenSearch 5.7 Medium -
org.opensearch.plugin:opensearch-securityMaven Issue with fine-grained access control of indices backing data streams 6.3 Medium -
org.opensearch.plugin:opensearch-securityMaven OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information 7.5 High