Threats tagged 'ghsa-fmgj-xvwq-2gqq'

A vulnerability in Elastic Cloud Enterprise (ECE) allows an attacker who controls any host in the installation to bypass authorization by exploiting a user-controlled key. This can lead to privilege escalation through privilege abuse, granting the attacker credentials reserved for other platform roles. With these credentials, the attacker can gain full control over the ECE control plane and its managed deployments.