CVE-2017-12195

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-12195
A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.

4.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability : 2.2 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

5.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability : 8.6 / Impact : 4.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://access.redhat.com/errata/RHSA-2017:3188 Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:3389 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12195 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:openshift_container_platform:3.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:3.5:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:3.6:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:3.7:*:*:*:*:*:*:*
History

12 Feb 2023, 23:28

Type Values Removed Values Added
Summary An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices. A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2017-12195', 'name': 'https://access.redhat.com/security/cve/CVE-2017-12195', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1501986', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=1501986', 'tags': [], 'refsource': 'MISC'}
CWE CWE-295 CWE-287

02 Feb 2023, 16:18

Type Values Removed Values Added
Summary A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices. An attacker with knowledge of the given name used to authenticate and access Elasticsearch can later access it without the token, bypassing authentication. This attack also requires that the Elasticsearch be configured with an external route, and the data accessed is limited to the indices.
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2017-12195 -
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1501986 -
Information

Published : 2018-07-27 15:29

Updated : 2023-12-10 12:44

NVD link : CVE-2017-12195

Mitre link : CVE-2017-12195

CVE.ORG link : CVE-2017-12195

JSON object : View

Products Affected

redhat

  • openshift_container_platform
CWE
CWE-287

Improper Authentication

CWE-295

Improper Certificate Validation