Threats tagged 'ghsa-j3hp-3xxc-r2mw'

Elastic Cloud Enterprise (ECE) has a vulnerability where sensitive information, including role tokens, is stored in files or directories accessible to lower-privileged platform components. This can allow an attacker with internal access to retrieve these secrets and potentially add unauthorized hosts with elevated roles. The vulnerability is identified as CWE-538 and has a CVSS score of 6.4, indicating a medium severity.