CVE-2018-3831 — elasticsearch: Information exposure via _cluster/settings API

Back Back to CVE browser

HIGH

elasticsearch: Information exposure via _cluster/settings API

Published Sep 19, 2018

8.8

HIGH

CVSS 3.1

EPSS 1.98%

Description

Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch _cluster/settings API, when queried, could leak sensitive configuration information such as passwords, tokens, or usernames. This could allow an authenticated Elasticsearch user to improperly view these details.

Affected products

Vendor Elastic Product Elasticsearch Default
n/a
- Version
  before 5.6.12 and 6.4.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Elastic

Elasticsearch

n/a

Version	Status	Constraints
before 5.6.12 and 6.4.1	affected	-

Red Hat Fuse 7.7.0

elasticsearch

Fixed · RHSA-2020:3192
Red Hat Decision Manager 7

elasticsearch

Affected
Red Hat JBoss Fuse 6

elasticsearch

Out of support scope
Red Hat OpenShift Container Platform 3.10

elasticsearch

Not affected
Red Hat OpenShift Container Platform 3.11

elasticsearch

Not affected
Red Hat OpenShift Container Platform 3.2

elasticsearch

Not affected
Red Hat OpenShift Container Platform 3.3

elasticsearch

Not affected
Red Hat OpenShift Container Platform 3.4

elasticsearch

Not affected
Red Hat OpenShift Container Platform 3.5

elasticsearch

Not affected
Red Hat OpenShift Container Platform 3.6

elasticsearch

Not affected
Red Hat OpenShift Container Platform 3.7

elasticsearch

Not affected
Red Hat OpenShift Container Platform 3.9

elasticsearch

Not affected
Red Hat OpenShift Enterprise 3.0

elasticsearch

Not affected
Red Hat OpenShift Enterprise 3.1

elasticsearch

Not affected
Red Hat OpenStack Platform 8 (Liberty) Operational Tools

elasticsearch

Will not fix
Red Hat OpenStack Platform 9 (Mitaka) Operational Tools

elasticsearch

Will not fix
Red Hat Process Automation 7

elasticsearch

Affected
Red Hat Subscription Asset Manager

elasticsearch

Will not fix

Product	Package	State	Advisory
Red Hat Fuse 7.7.0	elasticsearch	Fixed	RHSA-2020:3192
Red Hat Decision Manager 7	elasticsearch	Affected	n/a
Red Hat JBoss Fuse 6	elasticsearch	Out of support scope	n/a
Red Hat OpenShift Container Platform 3.10	elasticsearch	Not affected	n/a
Red Hat OpenShift Container Platform 3.11	elasticsearch	Not affected	n/a
Red Hat OpenShift Container Platform 3.2	elasticsearch	Not affected	n/a
Red Hat OpenShift Container Platform 3.3	elasticsearch	Not affected	n/a
Red Hat OpenShift Container Platform 3.4	elasticsearch	Not affected	n/a
Red Hat OpenShift Container Platform 3.5	elasticsearch	Not affected	n/a
Red Hat OpenShift Container Platform 3.6	elasticsearch	Not affected	n/a
Red Hat OpenShift Container Platform 3.7	elasticsearch	Not affected	n/a
Red Hat OpenShift Container Platform 3.9	elasticsearch	Not affected	n/a
Red Hat OpenShift Enterprise 3.0	elasticsearch	Not affected	n/a
Red Hat OpenShift Enterprise 3.1	elasticsearch	Not affected	n/a
Red Hat OpenStack Platform 8 (Liberty) Operational Tools	elasticsearch	Will not fix	n/a
Red Hat OpenStack Platform 9 (Mitaka) Operational Tools	elasticsearch	Will not fix	n/a
Red Hat Process Automation 7	elasticsearch	Affected	n/a
Red Hat Subscription Asset Manager	elasticsearch	Will not fix	n/a

Remediation

Red Hat statement

Subscription Asset Manager is now in a reduced support phase receiving only Critical impact security fixes. This issue has been rated as having a security impact Moderate, and is not currently planned to be addressed in future updates.

Metrics

1.98% 0.01985

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.01985

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	1.98% (0.01985)	79.86th	v5 (v2026.06.15)
Jun 15, 2026	1.98% (0.01985)	77.92th	v5 (v2026.06.15)
Jul 20, 2024	0.08% (0.00078)	34.40th	v3 (v2023.03.01)
Jun 22, 2024	0.08% (0.00078)	34.16th	v3 (v2023.03.01)
Mar 7, 2023	0.08% (0.00078)	32.15th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Sep 10, 2022	0.89% (0.00885)	26.24th	v2 (v2022.01.01)
Apr 1, 2022	0.89% (0.00885)	24.24th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00885)	10.50th	v2 (v2022.01.01)
Feb 3, 2022	0.62% (0.00624)	17.80th	v1
Jan 6, 2022	0.62% (0.00624)	17.24th	v1
Sep 1, 2021	0.62% (0.00624)	45.04th	v1
Apr 14, 2021	0.62% (0.00624)	0.00th	v1

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (7)

https://access.redhat.com/security/cve/CVE-2018-3831
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1632452
Issue Tracking
https://discuss.elastic.co/t/elastic-stack-6-4-1-and-5-6-12-security-update/149035
x_refsource_CONFIRMMitigationVendor Advisory
https://github.com/advisories/GHSA-r9fv-qpm9-rj4g
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3831
https://www.cve.org/CVERecord?id=CVE-2018-3831
https://www.elastic.co/community/security
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2018-3831		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1632452		Issue Tracking
https://discuss.elastic.co/t/elastic-stack-6-4-1-and-5-6-12-security-update/149035		x_refsource_CONFIRMMitigationVendor Advisory
https://github.com/advisories/GHSA-r9fv-qpm9-rj4g		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-3831
https://www.cve.org/CVERecord?id=CVE-2018-3831
https://www.elastic.co/community/security		x_refsource_CONFIRMVendor Advisory