CVE-2021-37937: Elasticsearch privilege escalation
An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Elasticsearch privilege escalation vulnerability?
The vulnerability ID for this Elasticsearch privilege escalation vulnerability is CVE-2021-37937.
What is the severity level of CVE-2021-37937?
The severity level of CVE-2021-37937 is high with a score of 8.8.
Which versions of Elasticsearch are affected by CVE-2021-37937?
Versions between 7.13.0 and 7.14.0 of Elasticsearch are affected by CVE-2021-37937.
How can this vulnerability be exploited?
A compromised Fleet-Server service account could potentially create API keys with higher privileges than intended.
Where can I find more information about CVE-2021-37937?
You can find more information about CVE-2021-37937 in the following references: [link1](https://discuss.elastic.co/t/elastic-stack-7-14-1-security-update/283077) and [link2](https://www.elastic.co/community/security).