CoreCVE
Back

HIGH

Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface

Published Aug 18, 2020

Description

Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will be able to view the administrator API credentials. These credentials could allow the developer user to conduct operations with the same permissions of the App Search administrator.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-266

Incorrect Privilege Assignment

CWE-269

Improper Privilege Management

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner elastic
Published Aug 18, 2020
Updated Aug 4, 2024
Reserved Jan 14, 2020
Link CVE-2020-7018
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-7018
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-7018