CVE-2018-3822: Path Traversal
X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML canonicalization and DOM traversal. An attacker might have been able to impersonate a legitimate user if the SAML Identity Provider allows for self registration with arbitrary identifiers and the attacker can register an account which an identifier that shares a suffix with a legitimate account. Both of those conditions must be true in order to exploit this flaw.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3822?
CVE-2018-3822 is rated as a high severity vulnerability due to its potential for user impersonation.
How do I fix CVE-2018-3822?
To remediate CVE-2018-3822, upgrading to Elastic X-Pack version 6.2.3 or later is recommended.
Which versions of X-Pack Security are affected by CVE-2018-3822?
The affected versions of X-Pack Security are 6.2.0, 6.2.1, and 6.2.2.
What type of attack is associated with CVE-2018-3822?
CVE-2018-3822 is associated with a user impersonation attack via incorrect XML canonicalization.
What could an attacker achieve by exploiting CVE-2018-3822?
By exploiting CVE-2018-3822, an attacker could impersonate a legitimate user if certain conditions related to SAML Identity Provider self-registration are met.