PT-2018-16223 · Elastic · Cloud Enterprise

Published 2018-09-19 · Updated 2023-03-04 · CVE-2018-3829

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Elastic Cloud Enterprise (ECE) versions prior to 1.1.4

Description A security issue was found in Elastic Cloud Enterprise where a user could scale out allocators on new hosts using an invalid roles token. An attacker with access to the previous runner ID and IP address of the coordinator-host could exploit this to add an allocator to an existing ECE installation, potentially gaining access to other clusters' data.

Recommendations For versions prior to 1.1.4, update to version 1.1.4 or later to resolve the issue.

Fix

Improper Authorization

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-285

CWE-290

Related Identifiers

CVE-2018-3829

Affected Products

Cloud Enterprise

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-3829 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3829 · Vendor Advisory
• https://elastic.co/community/security · Vendor Advisory
• https://discuss.elastic.co/t/elastic-cloud-enterprise-1-1-4-security-update/135778 · Vendor Advisory