PT-2018-13964 · Elastic · Security

Published 2018-12-20 · Updated 2022-05-13 · CVE-2018-17244

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Elasticsearch Security versions 6.4.0 to 6.4.2

Description The issue arises from an error in applying request headers to requests when using certain authentication realms, such as Active Directory, LDAP, Native, or File realms. If multiple requests for the same username are being authenticated at the same time, a request may receive headers intended for another request. This can lead to a situation where a request is executed under the wrong user, potentially allowing a user to access information they should not have access to.

Recommendations For Elasticsearch Security versions 6.4.0 to 6.4.2, consider disabling the concurrent authentication feature for the affected realms as a temporary workaround until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Fix

Race Condition

Information Disclosure

Weakness Enumeration

CWE-362

CWE-200

Related Identifiers

CVE-2018-17244

GHSA-VPQM-88C4-X4CV

Affected Products

Security

References · 7

• https://osv.dev/vulnerability/CVE-2018-17244 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17244 · Security Note
• https://elastic.co/community/security · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vpqm-88c4-x4cv · Vendor Advisory
• https://discuss.elastic.co/t/elastic-stack-6-4-3-and-5-6-13-security-update/155594 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17244 · Note
• http://securityfocus.com/bid/106318 · Note