high8.1
CVE-2024-37282
It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to cr…
Impact
It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys that have elevated privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Elastic Cloud Enterprise | from 3.0.0 before 3.7.2 |