Threats tagged 'ghsa-j27j-r2hf-x7q7'

A vulnerability in Elastic Cloud Enterprise (ECE) involves insertion of sensitive information into an externally-accessible file or directory. After the ECE certificate rotation procedure, sensitive platform credentials and certificate authority private keys are retained in data accessible by lower-privileged components. An attacker with control over any host in the installation can leverage this to escalate privileges and gain full control of the ECE control plane and managed deployments.