PT-2020-16803 · Elastic · Elasticsearch-Operator-Container

Published 2020-12-02 · Updated 2020-12-04 · CVE-2020-27816

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions elasticsearch-operator-container versions prior to 4.7

Description The issue arises from the elasticsearch-operator's failure to validate the namespace where the kibana logging resource is created. This allows for the potential replacement of the original openshift-logging console link with a different one, based on a new CR for a new kibana resource. As a result, this could lead to arbitrary URL redirection or damage to the openshift-logging console link.

Recommendations For versions prior to 4.7, update to version 4.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the kibana logging resource creation to minimize the risk of exploitation.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-27816

Affected Products

Elasticsearch-Operator-Container

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-27816 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27816 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1902698 · Note
• https://t.me/cvenotify/6438 · Telegram Post