[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foYzW8GGHc0WLQsHCUYxfN1nlpH16a-IelyXRadZSNJk":3,"g5a-risk:CVE-2020-7018":111},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":49,"weaknesses":56,"weaknessesCount":70,"isActivelyExploited":71,"cisaInfo":26,"otxData":26,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":107,"notableEvents":108},"CVE-2020-7018","What is CVE-2020-7018?","Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will be able to view the administrator API credentials. These credentials could allow the developer user to conduct operations with the same permissions of the App Search administrator.","Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is given the �developer� role, they will...","2020-08-18T17:15:11.627","2020-08-26T14:11:08.19",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,"MEDIUM",8,2.9,0.0109,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"elastic","enterprise_search","*","cpe:2.3:a:elastic:enterprise_search:*:*:*:*:*:*:*:*",1,[51],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fdiscuss.elastic.co\u002Ft\u002Fenterprise-search-7-9-0-security-update\u002F245457","Elastic",[55],"Vendor Advisory",[57,65],{"id":58,"name":59,"description":60,"extendedDescription":61,"status":62,"abstraction":63,"structure":64},"CWE-266","Incorrect Privilege Assignment","A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.","","Draft","Base","Simple",{"id":66,"name":67,"description":68,"extendedDescription":61,"status":62,"abstraction":69,"structure":64},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","Class",2,false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2020-7018? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-7018, a high severity cyber security vulnerability from 2020. Elastic Enterprise Search before 7.9.0 contain a credential ...","CVE-2020-7018, CVE-2020-7018 vulnerability, CVE-2020-7018 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, elastic security, enterprise_search vulnerability","\u002Fwhat-is\u002Fcve-2020-7018",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-7018","Cybersecurity","CVE-2020-7018, CVE-2020-7018 vulnerability, CVE-2020-7018 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":26,"Negate":26,"Nodes":100},[101],{"Operator":102,"Negate":26,"CPEMatch":103},"OR",[104],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":105,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":106,"VersionEndIncluding":26},"367A998E-1763-4AAE-A971-9FFA0D9A4030","7.9.0",[],[],{"lastModified":11,"cacheTime":110,"version":32},1792260435506,{"score":112,"band":113,"action":114,"scoredAt":115},47,"Medium","Plan remediation","2026-10-16T06:49:10.997246+00:00"]