CVE-2019-7611

score

<0.1

cvss

8.1

epss

2.1%

published

2019-03-25

kev added

—

first seen

2026-10-21

Elasticsearch versions before 5.6.15 and 6.6.1 contain a permission issue caused by disabled Field Level Security and Document Level Security in elasticsearch.yml, letting attackers gain additional permissions when accessing _aliases, _shrink, or _split endpoints, exploit requires security features to be disabled.