CVE-2017-12195

3: authentication bypass for elasticsearch with external routes

Published Jul 27, 2018 CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Description
A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2017-3770 A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 5, 2024, 6:28 PM
Reserved
Aug 1, 2017, 12:00 AM
Status
Modified
Published
Jul 27, 2018, 3:29 PM
Modified
Jun 17, 2026, 1:02 AM
Severity
Moderate
Public date
Nov 28, 2017, 12:00 AM