SUSE CVE-2020-7019

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attack...

CVE-2020-7019 affecting package rubygem-elasticsearch 7.6.0-1

CVE-2020-7019 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...

com.automattic:elasticsearch-statsd (5.4.0.0), com.eurodyn.qlack2.util:qlack2-util-avail-check-elasticsearch (>=2.2.4, <=2.3.19) +74 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (5.4.0)

org.elasticsearch:elasticsearch MAVEN version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 5.4.0.0 -...

com.blogspot.geekabyte.krwkrw:krwler (>=0.1.2, <=0.1.3), com.blogspot.geekabyte.webmuncher:webmuncher (0.1.4) +62 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.5.0)

org.elasticsearch:elasticsearch MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.blogspot.geekabyte.krwkrw:krwler =0.1.2, =1.0.0, =1.1, =1.5.0, =1.5.0, =2.5.0, =1.5.0, =1.5.0...

fr.pilato.spring:spring-elasticsearch (>=0.0.1, <=0.0.2), org.fusesource.insight:insight-elasticsearch (>=7.1.0.fuse-047, <=7.2.0.redhat-060) +1 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.19.4)

org.elasticsearch:elasticsearch MAVEN version 0.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - fr.pilato.spring:spring-elasticsearch =0.0.1, =7.1.0.fuse-047, =7.1.0.fuse-047, =7.2.0.redhat-06...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (1.6.5), fr.pilato.spring:spring-elasticsearch (0.1.0) +1 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.20.6)

org.elasticsearch:elasticsearch MAVEN version 0.20.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 1.6.5 -...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (1.6.11), com.github.tlrx:elasticsearch-river-ldap (0.0.2) +10 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.90.2)

org.elasticsearch:elasticsearch MAVEN version 0.90.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 1.6.11 -...

org.elasticsearch:elasticsearch-analysis-icu (0.16.0), org.elasticsearch:elasticsearch-cloud-aws (0.16.0) +13 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.16.0)

org.elasticsearch:elasticsearch MAVEN version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.0 - org.elasticsearch:elasticsearch-cloud-aws...

fr.pilato.elasticsearch.river:fsriver (0.0.2), io.searchbox:jest (0.0.1) potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.19.8)

org.elasticsearch:elasticsearch MAVEN version 0.19.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - fr.pilato.elasticsearch.river:fsriver 0.0.2 - io.searchbox:jest 0.0.1 Source cves: CVE-2020-7019...

com.github.dapicard.elasticsearch.curator:elasticsearch-curator (1.6.0.1), com.github.lbroudoux.elasticsearch:amazon-s3-river (1.6.0) +11 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.6.2)

org.elasticsearch:elasticsearch MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.dapicard.elasticsearch.curator:elasticsearch-curator 1.6.0.1 -...

org.elasticsearch:elasticsearch-analysis-icu (0.17.3), org.elasticsearch:elasticsearch-cloud-aws (0.17.3) +11 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.17.3)

org.elasticsearch:elasticsearch MAVEN version 0.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.3 - org.elasticsearch:elasticsearch-cloud-aws...

com.automattic:elasticsearch-statsd (5.3.3.0), com.floragunn:dlic-search-guard-module-kibana-multitenancy (>=5.3-2, <=5.3-4) +17 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (5.3.3)

org.elasticsearch:elasticsearch MAVEN version 5.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 5.3.3.0 -...

at.molindo:esi4j (>=1.0.3, <=2.0.1), at.molindo:scrutineer (2.0.0) +138 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.4.4)

org.elasticsearch:elasticsearch MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j =1.0.3, =1.0.2, =0.1pre2, =0.1pre1, =0.1pre1, =0.1pre1, =0.1pre4, =0.1pre4,...

com.code972:elasticsearch-analysis-hebrew (1.4.2), com.sksamuel.elastic4s:elastic4s_2.10 (1.2.3.0) +2 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.2.3)

org.elasticsearch:elasticsearch MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.code972:elasticsearch-analysis-hebrew 1.4.2 - com.sksamuel.elastic4s:elastic4s2.10 1.2.3.0 -...

com.kwince.contribs:osemmanager (0.0.1), org.elasticsearch:elasticsearch-analysis-icu (>=0.18.5, <=1.1.0) +16 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.18.5)

org.elasticsearch:elasticsearch MAVEN version 0.18.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.kwince.contribs:osemmanager 0.0.1 - org.elasticsearch:elasticsearch-analysis-icu =0.18.5,...

com.automattic:elasticsearch-statsd (2.1.2.0), com.code972.hebmorph:elasticsearch-analysis-hebrew (2.1) +63 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (2.1.2)

org.elasticsearch:elasticsearch MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 2.1.2.0 - com.code972.hebmorph:elasticsearch-analysis-hebrew...

org.elasticsearch.distribution.deb:elasticsearch (2.0.0-beta2), org.elasticsearch.distribution.rpm:elasticsearch (2.0.0-beta2) +24 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (2.0.0-beta2)

org.elasticsearch:elasticsearch MAVEN version 2.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.distribution.deb:elasticsearch 2.0.0-beta2 -...

ai.ylyue:yue-library-data-es (>=j8.2.2.0, <=j11.2.3.3), br.com.simpli:simpli-ws (>=1.2.1, <=2.2.0) +562 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (>=7.0.0, <=7.8.1)

org.elasticsearch:elasticsearch MAVEN version =7.0.0, =j8.2.2.0, =1.2.1, =0.0.1-alpha, =6.1.0, =6.1.7, =6.1.0, =6.1.0, =6.1.7, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =6.1.12c, =6.1.0, =6.1.12e and more Source cves: CVE-2020-7019 Source advisory: GHSA-C77J-P484-H84M...

com.github.tlrx:elasticsearch-test (0.90.6), com.sksamuel.elastic4s:elastic4s_2.10 (0.90.6.0) +9 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.90.6)

org.elasticsearch:elasticsearch MAVEN version 0.90.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test 0.90.6 - com.sksamuel.elastic4s:elastic4s2.10 0.90.6.0 -...

com.automattic:elasticsearch-statsd (>=2.4.2.0, <=2.4.2.1), com.floragunn:dlic-search-guard-module-dlsfls (2.4-5) +50 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (2.4.2)

org.elasticsearch:elasticsearch MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd =2.4.2.0, =2.4.2.8, =2.4.2.17, =0.0.4, =0.3.2, =0.6.2 -...