vulnwire
5.9med

CVE-2018-3825

In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used in the process of granting ZooKeeper acce…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
5.9
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.7%
percentile 51%
Public exploits
0
none known

In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used in the process of granting ZooKeeper access to Elasticsearch clusters. Unless explicitly overwritten, this master key is predictable across all ECE deployments. If an attacker can connect to ZooKeeper directly they would be able to access configuration information of other tenants if their cluster ID is known.

Exploit prediction (EPSS)

0.65% probability of exploitation in the next 30 days, higher than 51% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD2.04.3AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

  • Elastic Elastic Cloud Enterprise (ECE)

Classification

Weakness
  • CWE-321 Use of Hard-coded Cryptographic Key
  • CWE-1188 Initialization of a Resource with an Insecure Default

References

  • elastic.co /community/security · x_refsource_CONFIRM, x_transferred
  • discuss.elastic.co /t/elastic-cloud-enterprise-1-1-4-security-update/135778 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.