Beveiligingsadvies

CVE-2020-7009

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-31 19:05:13

Laatst bijgewerkt 2024-08-04 09:18:03

Toegewezen door elastic

CVSS-score geen score

Status PUBLISHED

Beschrijving

Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is able to generate an API key can perform a series of steps that result in an API key being generated with elevated privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗