Elastic Cloud Enterprise (ECE) 3.8.6 and 4.2.1 Security Update (ESA-2026-212)
Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Retrieve Embedded Sensitive Data (CAPEC-37). After the ECE certificate rotation procedure runs, data that it retains contains platform credentials and certificate authority private keys, and lower-privileged platform components can read this data. An attacker who controls any host in the ins…
Elastic Security Announcements에서 읽기
| 정보원 | Elastic Security Announcements |
|---|---|
| 수집 시각 | 2026. 10. 29. 오후 07:49 |
| 데이터 | Markdown JSON |
2026. 10. 29. 오후 07:45, Elastic Security Announcements에서 "Elastic Cloud Enterprise (ECE) 3.8.6 and 4.2.1 Security Update (ESA-2026-212)"을(를) 게시했습니다 (유형: 취약점 권고). 관련 기술: Elasticsearch / OpenSearch.