Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/06/06 7:56 p.m.23 views

Elastic: Improper authorization on `/api/as/v1/credentials/` for Dev Role User with Limited Engine Access

Summary: Dear Team, Since 1168528 was resolved. I have checking again for other roles. At Dev Role with Limited Engine Access, an user still can access API endpoint /api/as/v1/credentials/ to get all API keys private-key, search-key ... Steps To Reproduce: 1 - Log in Kibana with the admin elastic...

0.2AI score
SaveExploits0
Rows per page
Query Builder