CVE-2020-7018 Privilege escalation in Elastic Enterprise Search

High 8.8 Published 18 Aug 2020 Updated 4 Aug 2024

A developer role user can view administrator API credentials, allowing them to perform operations with administrator privileges.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-7018?

CVE-2020-7018 is a high-severity vulnerability in Elastic Enterprise Search, published on 18 Aug 2020. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the ï¿½developerï¿½ role, they will be able to view the administrator API credentials. These credentials could allow the developer user to conduct operations with the same permissions of the App Search administrator.

Weakness: CWE-269, CWE-266

Which versions are affected by CVE-2020-7018?

It affects 1 product.

Products include Elastic Enterprise Search.

How do I fix CVE-2020-7018?

No fix has been published for CVE-2020-7018 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-7018 being exploited?

There is no known exploitation of CVE-2020-7018 in the wild and no public exploit code.

Sources

Also known as GHSA-hq5w-vrxc-xx2g, UBUNTU-CVE-2020-7018.