Beveiligingsadvies

CVE-2020-7010

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-06-03 17:55:42

Laatst bijgewerkt 2024-11-18 17:29:12

Toegewezen door elastic

CVSS-score geen score

Status PUBLISHED

Beschrijving

Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able to determine when the current Elastic Stack cluster was deployed they may be able to more easily brute force the Elasticsearch credentials generated by ECK.

← Alle CVE's bekijken Bekijk op cve.org ↗