CVE-2017-8438

HIGH

Elastic X-Pack Security 5.0.0-5.4.0 - Improper Privilege Management in run_as Functionality

Title source: llm
STIX 2.1

Description

Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality. This bug prevents transitioning into the specified user specified in a run_as request. If a role has been created using a template that contains the _user properties, the behavior of run_as will be incorrect. Additionally if the run_as user specified does not exist, the transition will not happen.

References (3)

Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
https://www.elastic.co/blog/elasticsearch-5-4-1-and-5-3-3-released
Vendor Advisory x_refsource_confirm
https://www.elastic.co/community/security

Scores

CVSS v3 8.8
EPSS 0.0041
EPSS Percentile 61.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-269 CWE-284
Status published
Products (14)
elastic/x-pack 5.0.0
elastic/x-pack 5.0.1
elastic/x-pack 5.0.2
elastic/x-pack 5.1.0
elastic/x-pack 5.1.1
elastic/x-pack 5.2.0
elastic/x-pack 5.2.1
elastic/x-pack 5.2.2
elastic/x-pack 5.3.0
elastic/x-pack 5.3.1
... and 4 more
Published Jun 05, 2017
Tracked Since Feb 18, 2026