Lucene search

PRIOn knowledge basePRION:CVE-2019-7614

HistoryJul 30, 2019 - 10:15 p.m.

Race condition

2019-07-3022:15:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%

JSON

A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user.

CPENameOperatorVersion
elasticsearchge7.0.0
elasticsearchlt7.2.1
elasticsearchlt6.8.2

Name	Operator	Version
elasticsearch	ge	7.0.0
elasticsearch	lt	7.2.1
elasticsearch	lt	6.8.2

References

www.elastic.co/community/security/