Search Guard Suite 53.5
Release Date: 2022-10-05
This is a security fix release for an issue with datastreams.
Since data streams are an X-Pack feature in Elasticsearch 7.x, we did not officially support them. Nevertheless we decided to release a fix for it but won’t issue a CVE because datastreams was (and remains) an unsupported feature.
Security Fixes
An authenticated but unauthorized user could access all data stream events
An authenticated but unauthorized user could access all data stream events via the _search API.
This update fixes this issue.
Details: