CVE-2017-8438

2017-06-0514:29:00

CWE-284

CWE-269

[email protected]

web.nvd.nist.gov

cve-2017-8438

elastic x-pack security

privilege escalation

run_as functionality

nvd

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.2%

JSON

CPENameOperatorVersion
elastic:x\-packelastic x-packeq5.0.0
elastic:x\-packelastic x-packeq5.0.1
elastic:x\-packelastic x-packeq5.0.2
elastic:x\-packelastic x-packeq5.1.0
elastic:x\-packelastic x-packeq5.1.1
elastic:x\-packelastic x-packeq5.2.0
elastic:x\-packelastic x-packeq5.2.1
elastic:x\-packelastic x-packeq5.2.2
elastic:x\-packelastic x-packeq5.3.0
elastic:x\-packelastic x-packeq5.3.1

CPE	Name	Operator	Version
elastic:x\-pack	elastic x-pack	eq	5.0.0
elastic:x\-pack	elastic x-pack	eq	5.0.1
elastic:x\-pack	elastic x-pack	eq	5.0.2
elastic:x\-pack	elastic x-pack	eq	5.1.0
elastic:x\-pack	elastic x-pack	eq	5.1.1
elastic:x\-pack	elastic x-pack	eq	5.2.0
elastic:x\-pack	elastic x-pack	eq	5.2.1
elastic:x\-pack	elastic x-pack	eq	5.2.2
elastic:x\-pack	elastic x-pack	eq	5.3.0
elastic:x\-pack	elastic x-pack	eq	5.3.1