BIT-elasticsearch-2021-37937

vendorUSosv

Elasticsearch privilege escalation

view advisory published 2024-03-06Licence: per source

An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-37937US	high8.8	0.71% (53rd)	—	2023-11-22
An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be…

references

External citations — patches, advisories, analysis.

https://discuss.elastic.co/t/elastic-stack-7-14-1-security-update/283077ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2021-37937WEB
https://www.elastic.co/community/securityADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan