CVE-2024-23447: Elastic Network Drive Connector

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user.

Affected products

• Elastic Network Drive Connector: before 8.12.1 (fixed in 8.12.1)

Published 2024-02-07. Last modified 2026-06-17.