Test Kennung:	1.3.6.1.4.1.25623.1.0.117697
Kategorie:	Privilege escalation
Titel:	Elastic Elasticsearch Privilege Escalation Vulnerability (ESA-2021-25)
Zusammenfassung:	Elastic Elasticsearch is prone to a privilege escalation; vulnerability.
Beschreibung:	Summary: Elastic Elasticsearch is prone to a privilege escalation vulnerability. Vulnerability Insight: An issue was found with how API keys are created with the fleet-server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised fleet-server service account could escalate themselves to a super-user. Affected Software/OS: Elastic Elasticsearch version 7.13.0 through 7.14.0. Solution: Update to version 7.14.1 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2021-37937 https://discuss.elastic.co/t/elastic-stack-7-14-1-security-update/283077 https://www.elastic.co/community/security
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.