CVE-2020-7021

🗓️ 10 Feb 2021 18:55:15Reported by elasticType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 129 Views

Elasticsearch versions < 7.10.0 & 6.8.14 - information disclosure issue with audit logging & emit_request_body optio

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Elastic vulnerabilities (CVE-2020-7021 )	3 Sep 202113:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability affects IBM Observability with Instana	11 Jan 202220:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) offline documentation	28 Sep 202107:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Elasticsearch shipped with IBM Tivoli Netcool Impact	6 Jul 202205:31	–	ibm
CBLMariner	CVE-2020-7021 affecting package rubygem-elasticsearch 7.6.0-1	26 May 202219:04	–	cbl_mariner
Circl	CVE-2020-7021	28 Jan 202401:48	–	circl
CNNVD	Elasticsearch 日志信息泄露漏洞	10 Feb 202100:00	–	cnnvd
CNVD	Elasticsearch Log Information Disclosure Vulnerability	9 Mar 202100:00	–	cnvd
Cvelist	CVE-2020-7021	10 Feb 202118:55	–	cvelist
Elastic	Elastic Stack 7.11.0 and 6.8.14 Security Update	10 Feb 202117:50	–	elastic

NVD

Node

elastic elasticsearchRange<6.8.14

elastic elasticsearchRange7.0.0–7.10.0

[
  {
    "product": "Elasticsearch",
    "vendor": "Elastic",
    "versions": [
      {
        "status": "affected",
        "version": "before 7.10.0 and 6.8.14"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20210319-0003/
discuss	www.discuss.elastic.co/t/elastic-stack-7-11-0-and-6-8-14-security-update/263915

21 Nov 2024 05:36Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24

CVSS 3.14.9

EPSS0.00292

CWE-532