Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated attacker could utilize API keys belonging to higher privileged users.
CVSS Information
N/A
Vulnerability Type
关键资源的不正确权限授予
Vulnerability Title
Elasticsearch Elastic Enterprise Search 安全漏洞
Vulnerability Description
Elasticsearch Elastic Enterprise Search是荷兰Elasticsearch公司的一款企业搜索工具。 Elastic Enterprise Search App Search versions 7.14.0之前版本存在安全漏洞，该漏洞源于程序容易出现API密钥通过替代路由丢失授权的问题，经过身份验证的攻击者可利用该漏洞获取更高权限用户的API密钥。
CVSS Information
N/A
Vulnerability Type
N/A