← CVE Intelligence

CVE-2024-37282

Elastic / Elastic Cloud Enterprise PUBLISHED

Description (CNA)

It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys that have elevated privileges.

Affected (CNA)

Vendor / productVersions
Elastic / Elastic Cloud Enterpriseaffected 3.0.0 before 3.7.2

CWE

CWE-285

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.