This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2017-8438 | BDVDB-2026-86076 Detail

ElasticX-Pack Security

Description#

Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality. This bug prevents transitioning into the specified user specified in a run_as request. If a role has been created using a template that contains the _user properties, the behavior of run_as will be incorrect. Additionally if the run_as user specified does not exist, the transition will not happen.

Impact#

No impact statement in the source data.

Weaknesses#

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.