CVSS: 3.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-7020 – elasticsearch: not properly preserving security permissions when executing complex queries may lead to information disclosure
https://notcve.org/view.php?id=CVE-2020-7020
Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain complex queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices. Elasticsearch versiones anteriores a 6.8.13 y 7.9.2, contienen un fallo de divulgación de documentos cuando es usado Document o Field Level Security. • https://discuss.elastic.co/t/elastic-stack-7-9-3-and-6-8-13-security-update/253033 https://security.netapp.com/advisory/ntap-20201123-0001 https://staging-website.elastic.co/community/security https://access.redhat.com/security/cve/CVE-2020-7020 https://bugzilla.redhat.com/show_bug.cgi?id=1893125 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-269: Improper Privilege Management CWE-270: Privilege Context Switching Error •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2020-7019
https://notcve.org/view.php?id=CVE-2020-7019
In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index. En Elasticsearch versiones anteriores a 7.9.0 y 6.8.12, se encontró un fallo de divulgación de campo al ejecutar una búsqueda de desplazamiento con Field Level Security. Si un usuario ejecuta la misma consulta que otro usuario más privilegiado realizó recientemente, la búsqueda de desplazamiento puede filtrar campos que deberían estar ocultos. • https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456 https://security.netapp.com/advisory/ntap-20200827-0001 • CWE-269: Improper Privilege Management CWE-270: Privilege Context Switching Error •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-7014
https://notcve.org/view.php?id=CVE-2020-7014
The fix for CVE-2020-7009 was found to be incomplete. Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys and also authentication tokens. An attacker who is able to generate an API key and an authentication token can perform a series of steps that result in an authentication token being generated with elevated privileges. Se encontró que la solución para CVE-2020-7009 estaba incompleta. Elasticsearch versiones desde 6.7.0 hasta 6.8.7 y 7.0.0 hasta 7.6.1, contienen un fallo de escalada de privilegios si un atacante puede crear claves de la API y también tokens de autenticación. • https://security.netapp.com/advisory/ntap-20200619-0003 https://www.elastic.co/community/security • CWE-266: Incorrect Privilege Assignment CWE-269: Improper Privilege Management •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-7009
https://notcve.org/view.php?id=CVE-2020-7009
Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is able to generate an API key can perform a series of steps that result in an API key being generated with elevated privileges. Elasticsearch versiones desde 6.7.0 en versiones anteriores a la 6.8.8 y versiones 7.0.0 en versiones anteriores a la 7.6.2 contienen un fallo de escalada de privilegios si un atacante es capaz de crear claves de la API. Un atacante que es capaz de generar una clave API puede llevar a cabo una serie de pasos que dan como resultado que se genere una clave API con privilegios elevados. • https://discuss.elastic.co/t/elastic-stack-6-8-8-and-7-6-2-security-update/225920 https://security.netapp.com/advisory/ntap-20200403-0004 https://www.elastic.co/community/security • CWE-266: Incorrect Privilege Assignment CWE-269: Improper Privilege Management •