Skip to content
Sign in
8.1 High

CVE-2024-37282 It was identified that under certain specific preconditions, an API key that was originally created with a specific…

Description

It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys that have elevated privileges.

Affected products and versions

Product Affected versions Fixed in
Elastic Cloud Enterprise 3.0 3.0.0 → < 3.7.2 3.7.2
elastic_cloud_enterprise 3.0 3.0.0 → < 3.7.2 3.7.2

Other CVEs of Elastic Cloud Enterprise

The 13 CVEs of Elastic Cloud Enterprise →
CVE-2026-115713 Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to… 7.5 High CVE-2026-115712 Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of… 4.3 Medium CVE-2026-115711 Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise… 6.4 Medium CVE-2026-115709 Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to… 8.2 High
Track this CVE