https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:31:07 +0000 https://cve.radiocsirt.org/vuln/bit-elasticsearch-2021-37937 <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.</p> <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.</p> https://cve.radiocsirt.org/vuln/bit-elasticsearch-2021-37937 https://cve.radiocsirt.org/vuln/certfr-2021-avi-670 certfr-2021-avi-670 https://cve.radiocsirt.org/vuln/certfr-2021-avi-670 https://cve.radiocsirt.org/vuln/euvd-2026-30026 EUVD-2026-30026 https://cve.radiocsirt.org/vuln/euvd-2026-30026 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37937 <p>An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.</p> <p>An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-37937 https://cve.radiocsirt.org/vuln/ghsa-4qh7-cr89-jx92 <p>An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.</p> <p>An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.</p> https://cve.radiocsirt.org/vuln/ghsa-4qh7-cr89-jx92 https://cve.radiocsirt.org/vuln/gsd-2021-37937 gsd-2021-37937 https://cve.radiocsirt.org/vuln/gsd-2021-37937 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-37937 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: elasticsearch</p> <p>An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: elasticsearch</p> <p>An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-37937 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0029 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen und um Administratorrechte zu erlangen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen und um Administratorrechte zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0029