CVE-2020-7020

🗓️ 22 Oct 2020 16:30:15Reported by elasticType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 160 Views

Elasticsearch versions <6.8.13, 7.9.2, disclose sensitive documents via search querie

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Elastic vulnerabilities (CVE-2020-7020 )	2 Sep 202121:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilitiy affects IBM Observability with Instana	11 Jan 202220:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) offline documentation	28 Sep 202107:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Elasticsearch shipped with IBM Tivoli Netcool Impact	6 Jul 202205:31	–	ibm
CBLMariner	CVE-2020-7020 affecting package rubygem-elasticsearch 7.6.0-1	26 May 202219:04	–	cbl_mariner
Circl	CVE-2020-7020	28 Jan 202400:49	–	circl
CNVD	Elasticsearch Information Disclosure Vulnerability (CNVD-2020-60336)	25 Oct 202000:00	–	cnvd
Cvelist	CVE-2020-7020	22 Oct 202016:30	–	cvelist
Elastic	Elastic Stack 7.9.3 and 6.8.13 Security Update	22 Oct 202015:34	–	elastic
EUVD	EUVD-2021-0657	7 Oct 202500:30	–	euvd

NVD

Node

elastic elasticsearchRange<6.8.13

elastic elasticsearchRange7.0.0–7.9.2

[
  {
    "product": "Elasticsearch",
    "vendor": "Elastic",
    "versions": [
      {
        "status": "affected",
        "version": "before 6.8.13 and 7.9.2"
      }
    ]
  }
]

Source	Link
staging-website	www.staging-website.elastic.co/community/security/
discuss	www.discuss.elastic.co/t/elastic-stack-7-9-3-and-6-8-13-security-update/253033
security	www.security.netapp.com/advisory/ntap-20201123-0001/

21 Nov 2024 05:36Current

3.7Low risk

Vulners AI Score3.7

CVSS 3.13.1

CVSS 23.5

EPSS0.00077