CVE-2020-7018
- State
- Published
- Severity
- Not scored
- Published
- Aug 18, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jan 14, 2020
Description
Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will be able to view the administrator API credentials. These credentials could allow the developer user to conduct operations with the same permissions of the App Search administrator.
Scores
The record has no CVSS score.
Weaknesses
- CWE-266 Incorrect Privilege Assignment
Affected Products
| Product | Versions |
|---|---|
Elastic Enterprise SearchElastic |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.