Description
No description available.
Elastic Cloud Enterprise 访问控制不当漏洞 可导致权限提升
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.venustech.com.cn/new_type/aqtg/20251110/28948.html
https://cn-sec.com/archives/4672094.html
https://zeropath.com/blog/cve-2025-37736-elastic-cloud-enterprise-authorization-summary
https://securityonline.info/elastic-patches-high-severity-privilege-escalation-flaw-in-elastic-cloud-enterprise-cve-2025-37736/
https://purple-ops.io/blog/elastic-ece-privilege-escalation
https://github.com/advisories/GHSA-5p88-6546-29fh
https://discuss.elastic.co/t/elastic-cloud-enterprise-ece-3-8-2-and-4-0-2-security-update-esa-2025-21/382641