Advisoriesby IbisElasticsearchGHSA-c77j-p484-h84m
Improper privilege management in elasticsearch
Fix: upgrade to 6.8.12 or later (2 fixed versions below)
In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| org.elasticsearch:elasticsearch Maven | >= 7.0.0, < 7.9.0 | 7.9.0 |
| < 6.8.12 | 6.8.12 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-269
- Also known as
- BIT-elasticsearch-2020-7019, CVE-2020-7019
More Elasticsearch advisories
All Elasticsearch
Exposure of Sensitive Information to an Unauthorized Actor in ElasticsearchCVE-2021-22137fixed in 6.8.15 +1Insertion of Sensitive Information into Log File in ElasticsearchCVE-2020-7021fixed in 6.8.14 +1Improper Privilege Management in ElasticsearchCVE-2020-7009fixed in 6.8.8 +1Exposure of Sensitive Information to an Unauthorized Actor in ElasticsearchCVE-2019-7619fixed in 6.8.4 +1Concurrent Execution using Shared Resource with Improper Synchronization in ElasticsearchCVE-2019-7614fixed in 6.8.2 +1Improper Limitation of a Pathname to a Restricted Directory in ElasticsearchCVE-2015-3337fixed in 1.4.5 +1