Lucene search
PRIOn knowledge basePRION:CVE-2020-7021HistoryFeb 10, 2021 - 7:15 p.m.
Information disclosure
2021-02-1019:15:00
PRIOn knowledge base
www.prio-n.com
3
Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch administrator to view these details.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elasticsearch | ge | 7.0.0 | |
| elasticsearch | lt | 7.10.0 | |
| elasticsearch | lt | 6.8.14 |
Related
openvas
openvas
Elastic Elasticsearch Information Disclosure Vulnerability (ESA-2021-03)
2021-02-15 00:00:00
ibm
ibm
github
github
Insertion of Sensitive Information into Log File in Elasticsearch
2022-05-24 17:41:42
osv
osv
BIT-elasticsearch-2020-7021
2024-03-06 10:54:14
CVE-2020-7021
2021-02-10 19:15:11
Insertion of Sensitive Information into Log File in Elasticsearch
2022-05-24 17:41:42
cbl_mariner
cbl_mariner
CVE-2020-7021 affecting package rubygem-elasticsearch 7.6.0-1
2022-05-26 19:04:38
photon
photon
Moderate Photon OS Security Update - PHSA-2021-0219
2021-04-14 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-2.0-0337
2021-04-17 00:00:00
Moderate Photon OS Security Update - PHSA-2021-3.0-0219
2021-04-14 00:00:00
ubuntucve
ubuntucve
CVE-2020-7021
2021-02-10 00:00:00
cve
cve
CVE-2020-7021
2021-02-10 19:15:11
nessus
nessus
Photon OS 3.0: Elasticsearch PHSA-2021-3.0-0219
2021-04-20 00:00:00
Photon OS 2.0: Elasticsearch PHSA-2021-2.0-0337
2021-04-20 00:00:00
redhatcve
redhatcve
CVE-2020-7021
2021-02-10 21:41:36
veracode
veracode
Information Disclosure
2021-02-15 04:34:05
nvd
nvd
CVE-2020-7021
2021-02-10 19:15:11
cvelist
cvelist
CVE-2020-7021
2021-02-10 18:55:15