Описание
Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user gaining access to unauthorized engines.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 7.14.0 (исключая)
cpe:2.3:a:elastic:enterprise_search:*:*:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.00232
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-732
CWE-732
Связанные уязвимости
github
больше 3 лет назад
Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user gaining access to unauthorized engines.
EPSS
Процентиль: 46%
0.00232
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-732
CWE-732