Lucene search
Veracode Vulnerability DatabaseVERACODE:7513HistorySep 20, 2018 - 6:50 a.m.
Information Disclosure
2018-09-2006:50:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
28.4%
elasticsearch is vulnerable to information disclosures. A malicious user can query the _snapshot API to receive the access_key and security_key parameters in plaintext.
Related
osv
osv
CVE-2018-3826
2018-09-19 19:29:00
nessus
nessus
Elasticsearch ESA-2018-10
2018-08-22 00:00:00
prion
prion
Design/Logic Flaw
2018-09-19 19:29:00
nvd
nvd
CVE-2018-3826
2018-09-19 19:29:00
openvas
openvas
Elasticsearch '_snapshot API' Information Disclosure Vulnerability - Linux
2018-10-09 00:00:00
Elasticsearch '_snapshot API' Information Disclosure Vulnerability - Windows
2018-10-09 00:00:00
cve
cve
CVE-2018-3826
2018-09-19 19:29:00
cvelist
cvelist
CVE-2018-3826
2018-09-19 19:00:00
ubuntucve
ubuntucve
CVE-2018-3826
2018-09-19 00:00:00