CVE-2020-7018
CVE-2020-7018
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will be able to view the administrator API credentials. These credentials could allow the developer user to conduct operations with the same permissions of the App Search administrator.
CVSS 8.8 · High · EPSS 1.1%
- Published
- Updated
Stack: system
Affected products and versions
elastic enterprise search
- Versions
- before 7.9.0: Affected
No fix published
elasticsearch Ubuntu:16.04:LTS
- Versions
- 1.6.2+dfsg-1
- 1.7.3+dfsg-1
- 1.7.3+dfsg-2
- 1.7.3+dfsg-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published