Version: SG FLX
Search Guard Suite 53.8
Release Date: 2023-11-29
This is a security release of Search Guard that applies to Multi-Tenancy only. If you have not enabled that Multi-Tenancy, you are not affected.
We ask all users that leverage the Multi-Tenancy features of Search Guard to update to Search Guard 53.8 or above.
If you are using Search Guard FLX, please upgrade to Search Guard FLX 1.4.1.
Security Fixes
Multi-Tenancy: Users with read/only tenants can do destructive operations such as deleting the .kibana index
A user with only READ access to a tenant cannot perform any updates to the corresponding tenant index, but can still issue destructive operations like DELETE. This release fixes the issue.