SUSE CVE-2020-7019

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attack...

CVE-2020-7019 affecting package rubygem-elasticsearch 7.6.0-1

CVE-2020-7019 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...

com.eurodyn.qlack2.fuse:qlack2-fuse-search-api (>=2.2.1, <=2.2.3), com.eurodyn.qlack2.fuse:qlack2-fuse-search-impl (>=2.2.1, <=2.2.3) +26 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.7.3)

org.elasticsearch:elasticsearch MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.eurodyn.qlack2.fuse:qlack2-fuse-search-api =2.2.1, =2.2.1, =0.1, =2.0.10, =1.0, =0.9.0-rc5-1,...

org.elasticsearch:elasticsearch-analysis-icu (0.14.1), org.elasticsearch:elasticsearch-cloud-aws (0.14.1) +10 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.14.1)

org.elasticsearch:elasticsearch MAVEN version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.1 - org.elasticsearch:elasticsearch-cloud-aws...

com.automattic:elasticsearch-statsd (5.5.1.0), com.erudika:para-search-elasticsearch (1.25.3) +40 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (5.5.1)

org.elasticsearch:elasticsearch MAVEN version 5.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 5.5.1.0 - com.erudika:para-search-elasticsearch 1.25.3 -...

com.kwince.contribs:osemmanager (0.0.1), org.elasticsearch:elasticsearch-analysis-icu (>=0.18.5, <=1.1.0) +16 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.18.5)

org.elasticsearch:elasticsearch MAVEN version 0.18.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.kwince.contribs:osemmanager 0.0.1 - org.elasticsearch:elasticsearch-analysis-icu =0.18.5,...

com.code972:elasticsearch-analysis-hebrew (1.5), com.englishtown:vertx-mod-elasticsearch (1.3.0) +68 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.3.2)

org.elasticsearch:elasticsearch MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.code972:elasticsearch-analysis-hebrew 1.5 - com.englishtown:vertx-mod-elasticsearch 1.3.0 -...

org.dspace.modules:additions (>=3.0-rc2, <=3.6), org.dspace.modules:jspui (>=3.0-rc1, <=3.6) +27 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.18.6)

org.elasticsearch:elasticsearch MAVEN version 0.18.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.dspace.modules:additions =3.0-rc2, =3.0-rc1, =3.0-rc1, =3.0-rc2, =3.0-rc1, =3.0-rc1, =3.0-rc...

fr.pilato.elasticsearch.crawler:fscrawler-elasticsearch-client-v5 (2.6), fr.pilato.elasticsearch.crawler:fscrawler-es5 (2.6) +19 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (5.6.11)

org.elasticsearch:elasticsearch MAVEN version 5.6.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - fr.pilato.elasticsearch.crawler:fscrawler-elasticsearch-client-v5 2.6 -...

fr.pilato.spring:spring-elasticsearch (>=0.0.1, <=0.0.2), org.fusesource.insight:insight-elasticsearch (>=7.1.0.fuse-047, <=7.2.0.redhat-060) +1 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.19.4)

org.elasticsearch:elasticsearch MAVEN version 0.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - fr.pilato.spring:spring-elasticsearch =0.0.1, =7.1.0.fuse-047, =7.1.0.fuse-047, =7.2.0.redhat-06...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (2.0.1), com.sindicetech.siren:siren-elasticsearch (1.3) +6 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.2.2)

org.elasticsearch:elasticsearch MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 2.0.1 -...

com.github.dapicard.elasticsearch.curator:elasticsearch-curator (1.6.0.1), com.github.lbroudoux.elasticsearch:amazon-s3-river (1.6.0) +11 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.6.2)

org.elasticsearch:elasticsearch MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.dapicard.elasticsearch.curator:elasticsearch-curator 1.6.0.1 -...

fr.jetoile.hadoop:hadoop-unit-elasticsearch (1.3), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha2) +22 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (5.0.0-alpha2)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - fr.jetoile.hadoop:hadoop-unit-elasticsearch 1.3 - org.elasticsearch.plugin:analysis-icu...

at.molindo:esi4j (>=2.0.2, <=2.0.3), com.englishtown.vertx:vertx-elasticsearch-service (>=2.0.0-rc5, <=2.0.0) +10 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.4.5)

org.elasticsearch:elasticsearch MAVEN version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j =2.0.2, =2.0.0-rc5, =2.0.0 - com.sksamuel.elastic4s:elastic4s2.10 1.4.14 -...

com.floragunn:search-guard-2 (5.0.0-alpha4-2a), com.floragunn:search-guard-ssl (5.0.0-alpha4-13a) +25 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (5.0.0-alpha4)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-2 5.0.0-alpha4-2a - com.floragunn:search-guard-ssl...

at.molindo:esi4j (1.0.0), com.sksamuel.elastic4s:elastic4s_2.10 (1.4.0.beta1) +32 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.4.0.beta1)

org.elasticsearch:elasticsearch MAVEN version 1.4.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j 1.0.0 - com.sksamuel.elastic4s:elastic4s2.10 1.4.0.beta1 -...

fr.pilato.elasticsearch.river:fsriver (0.0.2), io.searchbox:jest (0.0.1) potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.19.8)

org.elasticsearch:elasticsearch MAVEN version 0.19.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - fr.pilato.elasticsearch.river:fsriver 0.0.2 - io.searchbox:jest 0.0.1 Source cves: CVE-2020-7019...

com.github.kzwang:elasticsearch-osem (2.0.0.rc1), com.github.kzwang:elasticsearch-repository-gridfs (1.0.0.rc1) +8 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.0.0.rc2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.kzwang:elasticsearch-osem 2.0.0.rc1 -...

com.github.tlrx:elasticsearch-test (>=0.0.5, <=0.0.6), org.tynamo:tapestry-model-jpa (>=0.5.0, <=0.6.0) potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.20.0.rc1)

org.elasticsearch:elasticsearch MAVEN version 0.20.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test =0.0.5, =0.5.0, =0.6.0 Source cves: CVE-2020-7019 Source...

com.github.chytreg:elasticsearch-analysis-morfologik (2.3.1), fr.pilato.elasticsearch.river:fsriver (>=1.3.0, <=1.3.1) +12 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.3.1)

org.elasticsearch:elasticsearch MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.chytreg:elasticsearch-analysis-morfologik 2.3.1 - fr.pilato.elasticsearch.river:fsrive...