CVE-2024-23447

CVE-2024-23447 describes an information disclosure vulnerability in the Elastic Windows Network Drive Connector. When Document Level Security is configured with explicit write but denied read permissions, affected files remain visible in search applications despite being inaccessible via Network Drive. This medium-severity vulnerability (CVSS 6.5) allows an authenticated attacker to gain unauthorized access to sensitive file metadata, potentially leading to further reconnaissance. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.