Advisories for Maven/Org.elasticsearch.plugin/X-Pack package

The Reporting feature in X-Pack has an impersonation vulnerability. A user with the reporting_user role could execute a report with the permissions of another reporting user, possibly gaining access to sensitive data.