Aller au contenu
Se connecter
Non notée

CVE-2020-7018 Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface

Description

Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will be able to view the administrator API credentials. These credentials could allow the developer user to conduct operations with the same permissions of the App Search administrator.

Produits et versions touchés

Produit Versions touchées Corrigé en
Elastic Enterprise Search Versions non publiées

Autres CVE de Elastic Enterprise Search

Les 3 CVE de Elastic Enterprise Search →
CVE-2021-22148 Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound… Non notée CVE-2021-22149 Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing… Non notée
Suivre cette CVE