https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:05:30 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/euvd-2026-68615 EUVD-2026-68615 https://cve.radiocsirt.org/vuln/euvd-2026-68615 https://cve.radiocsirt.org/vuln/fkie_cve-2018-17244 <p>Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same username is being authenticated concurrently; when used with run as, this can result in the request running as the incorrect user. This could allow a user to access information that they should not have access to.</p> <p>Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same username is being authenticated concurrently; when used with run as, this can result in the request running as the incorrect user. This could allow a user to access information that they should not have access to.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-17244 https://cve.radiocsirt.org/vuln/ghsa-vpqm-88c4-x4cv <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same username is being authenticated concurrently; when used with run as, this can result in the request running as the incorrect user. This could allow a user to access information that they should not have access to.</p> <p><strong>Affected:</strong> Maven: org.elasticsearch:elasticsearch</p> <p>Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same username is being authenticated concurrently; when used with run as, this can result in the request running as the incorrect user. This could allow a user to access information that they should not have access to.</p> https://cve.radiocsirt.org/vuln/ghsa-vpqm-88c4-x4cv https://cve.radiocsirt.org/vuln/gsd-2018-17244 gsd-2018-17244 https://cve.radiocsirt.org/vuln/gsd-2018-17244