Skip to content
Sign in
Not rated

CVE-2020-7018 Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface

Description

Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will be able to view the administrator API credentials. These credentials could allow the developer user to conduct operations with the same permissions of the App Search administrator.

Affected products and versions

Product Affected versions Fixed in
Elastic Enterprise Search Versions not published

Other CVEs of Elastic Enterprise Search

The 3 CVEs of Elastic Enterprise Search →
CVE-2021-22148 Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound… Not rated CVE-2021-22149 Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing… Not rated
Track this CVE