CVE-2024-23447

6.5 mediumEPSS 0.4%

Medium (6.5) in elastic network drive connector. EPSS 0.4% chance of exploitation in the next 30 days.

An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2024-02-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

elastic:network_drive_connector

References

https://discuss.elastic.co/t/elastic-network-drive-connector-8-12-1-security-update-esa-2024-02/352687
https://www.elastic.co/community/security
https://discuss.elastic.co/t/elastic-network-drive-connector-8-12-1-security-update-esa-2024-02/352687
https://www.elastic.co/community/security

Check your stack JSON