Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:12614
HistoryJan 15, 2019 - 9:19 a.m.

Authentication Bypass

2019-01-1509:19:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.001 Low

EPSS

Percentile

46.4%

openshift elasticsearch is vulnerable to authentication bypass. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.

References

0.001 Low

EPSS

Percentile

46.4%