Lucene search
GoogleOSV:GHSA-VFP4-XX6M-7VF6HistoryFeb 15, 2022 - 1:57 a.m.
Cryptographic Issues in ECK
2022-02-1501:57:18
Google
osv.dev
11
0.007 Low
EPSS
Percentile
80.9%
Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able to determine when the current Elastic Stack cluster was deployed they may be able to more easily brute force the Elasticsearch credentials generated by ECK.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/elastic/cloud-on-k8s | lt | 1.1.0 |
Related
cve
cve
CVE-2020-7010
2020-06-03 18:15:22
cvelist
cvelist
CVE-2020-7010
2020-06-03 17:55:42
prion
prion
Stack overflow
2020-06-03 18:15:00
veracode
veracode
Insecure Random Number Generator
2020-04-29 04:26:08
github
github
Cryptographic Issues in ECK
2022-02-15 01:57:18
nvd
nvd
CVE-2020-7010
2020-06-03 18:15:22
ubuntucve
ubuntucve
CVE-2020-7010
2020-06-03 00:00:00