Elastic Stack 7.17.4 and 8.2.1 Security Update

🗓️ 24 May 2022 16:55:27Reported by ElasticCoType

elastic

elastic🔗 discuss.elastic.co👁 4 Views

Elastic Stack 7.17.4 and 8.2.1 fix CVE-2022-21449 by upgrading to OpenJDK 18.0.1 for SSO.

Reporter	Title	Published	Views	Family All 153
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® Semeru Runtime	25 May 202209:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	6 Oct 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Password Synchronization Plug-in for Windows AD is affected by multiple vulnerabilities	13 Jun 202508:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for June 2022	26 Jul 202207:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Java DOS vulnerabilities detected	28 Sep 202221:24	–	ibm
GithubExploit	Exploit for CVE-2022-21449	7 Feb 202315:33	–	githubexploit
GithubExploit	Exploit for CVE-2022-21449	20 Apr 202219:13	–	githubexploit
GithubExploit	Exploit for CVE-2022-21449	24 Apr 202210:59	–	githubexploit
GithubExploit	Exploit for CVE-2022-21449	20 Apr 202220:31	–	githubexploit

24 Jun 2022 08:00Current

7.7High risk

Vulners AI Score7.7

CVSS 25

CVSS 3.17.5

EPSS0.34335

SSVC

elastic stack vulnerability 2022 21449 elliptic curve signing saml signatures openid connect single sign on openjdk eighteen mitigation update