Maven/org.elasticsearch:elasticsearch CVE-2020-7019: medium 6.5, EPSS 1.40%
Improper privilege management in elasticsearch
Action: Upgrade org.elasticsearch:elasticsearch to 6.8.12 (6.x) or 7.9.0 (7.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.9.0 | - |
| 0 | 6.8.12 | - |
Fixed versions
| 7.9.0 | 6.8.12 |
Sources
- osv: GHSA-c77j-p484-h84m
- https://nvd.nist.gov/vuln/detail/CVE-2020-7019
- https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456
- https://github.com/elastic/elasticsearch
- https://security.netapp.com/advisory/ntap-20200827-0001
CVE-2020-7019 · published · modified · JSON