Lucene search
PRIOn knowledge basePRION:CVE-2018-3829HistorySep 19, 2018 - 7:29 p.m.
Code injection
2018-09-1919:29:00
PRIOn knowledge base
www.prio-n.com
1
In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on new hosts with an invalid roles token. An attacker with access to the previous runner ID and IP address of the coordinator-host could add a allocator to an existing ECE install to gain access to other clusters data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elastic_cloud_enterprise | lt | 1.1.4 |
Related
cve
cve
CVE-2018-3829
2018-09-19 19:29:01
cvelist
cvelist
CVE-2018-3829
2018-09-19 19:00:00
nvd
nvd
CVE-2018-3829
2018-09-19 19:29:01