Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same username is being authenticated concurrently; when used with run as, this can result in the request running as the incorrect user. This could allow a user to access information that they should not have access to.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to
    requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers
    intended for another request if the same username is being authenticated concurrently; when used with run
    as, this can result in the request running as the incorrect user. This could allow a user to access
    information that they should not have access to. (CVE-2018-17244)

An update of the elasticsearch package has been released.

ID	Name	Product	Family	Severity
419470	SCA: security update for org.elasticsearch:elasticsearch (GHSA-vpqm-88c4-x4cv)	Tenable Cloud Security	SCA Checks	medium
419470	SCA: security update for org.elasticsearch:elasticsearch (GHSA-vpqm-88c4-x4cv)	Tenable Self-Hosted Container Security	SCA Checks	medium
202905	Photon OS 3.0: Elasticsearch PHSA-2019-3.0-0002	Nessus	PhotonOS Local Security Checks	medium
133297	Photon OS 1.0: Elasticsearch PHSA-2019-1.0-0209	Nessus	PhotonOS Local Security Checks	medium
122906	Photon OS 2.0: Elasticsearch PHSA-2019-2.0-0132	Nessus	PhotonOS Local Security Checks	medium
118799	Elasticsearch ESA-2018-16	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2018-17244

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium