Lucene search
Veracode Vulnerability DatabaseVERACODE:27647HistoryOct 23, 2020 - 3:40 a.m.
Information Disclosure
2020-10-2303:40:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
210
0.001 Low
EPSS
Percentile
30.0%
elasticsearch is vulnerable to information disclosure. The vulnerability exists when Document or Field Level Security is used, as search queries do not properly preserve security permissions when executing certain complex queries.
References
Related
prion
prion
Design/Logic Flaw
2020-10-22 17:15:00
cbl_mariner
cbl_mariner
CVE-2020-7020 affecting package rubygem-elasticsearch 7.6.0-1
2022-05-26 19:04:38
cve
cve
CVE-2020-7020
2020-10-22 17:15:12
photon
photon
Low Photon OS Security Update - PHSA-2020-0166
2020-11-25 00:00:00
Low Photon OS Security Update - PHSA-2020-3.0-0166
2020-11-25 00:00:00
cvelist
cvelist
CVE-2020-7020
2020-10-22 16:30:15
ibm
ibm
osv
osv
CVE-2020-7020
2020-10-22 17:15:12
BIT-elasticsearch-2020-7020
2024-03-06 10:54:24
Privilege Context Switching Error in Elasticsearch
2021-03-18 19:27:13
openvas
openvas
Elastic Elasticsearch Information Disclosure Vulnerability (ESA-2020-13)
2021-01-25 00:00:00
nessus
nessus
Photon OS 2.0: Elasticsearch PHSA-2021-2.0-0317
2021-02-14 00:00:00
Photon OS 3.0: Elasticsearch PHSA-2020-3.0-0166
2020-12-03 00:00:00
Photon OS 1.0: Elasticsearch PHSA-2020-1.0-0348
2020-12-22 00:00:00
nvd
nvd
CVE-2020-7020
2020-10-22 17:15:12
github
github
Privilege Context Switching Error in Elasticsearch
2021-03-18 19:27:13
redhatcve
redhatcve
CVE-2020-7020
2020-10-30 09:56:07
ubuntucve
ubuntucve
CVE-2020-7020
2020-10-22 00:00:00
redhat
redhat
(RHSA-2022:5532) Important: Red Hat Fuse 7.11.0 release and security update
2022-07-07 14:16:35