Security Bulletin: Multiple security vulnerabilities have been identified in Elasticsearch shipped with IBM Tivoli Netcool Impact

Summary Elasticsearch is shipped with IBM Tivoli Netcool Impact, Information about multiple security vulnerabilities affecting elasticsearch has been published in a security bulletin. Vulnerability Details CVEID:CVE-2020-7020 DESCRIPTION: Elastic Enterprise Search could allow a remote authenticat...

CVE-2020-7020 affecting package rubygem-elasticsearch 7.6.0-1

CVE-2020-7020 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: IBM Cloud Private is vulnerable to Elastic vulnerabilities (CVE-2020-7020 )

Summary IBM Cloud Private is vulnerable to Elastic vulnerabilities Vulnerability Details CVEID: CVE-2020-7020 DESCRIPTION: Elastic Enterprise Search could allow a remote authenticated attacker to obtain sensitive information, caused by not properly preserving security permissions in search querie...

com.sonian:elasticsearch-equilibrium (0.20.0), com.sonian:elasticsearch-jetty (>=0.20.0, <=0.20.1) +2 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.20.2)

org.elasticsearch:elasticsearch MAVEN version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sonian:elasticsearch-equilibrium 0.20.0 - com.sonian:elasticsearch-jetty =0.20.0, =0.20.2-0....

com.code-troopers.play:play2-elasticsearch-jest_2.10 (>=0.1.0, <=0.1.1), com.englishtown:vertx-mod-elasticsearch (1.0.0) +20 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (1.0.1)

org.elasticsearch:elasticsearch MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.code-troopers.play:play2-elasticsearch-jest2.10 =0.1.0, =1.0.1.0, =1.6.0, =2.0.0, =1.0.6,...

org.elasticsearch.client:transport (5.0.0-alpha5), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha5) +31 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.0.0-alpha5)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.client:transport 5.0.0-alpha5 - org.elasticsearch.plugin:analysis-icu...

com.avides.springboot.testcontainer:springboot-testcontainer-elasticsearch (>=0.1.0-rc6, <=0.1.0-rc7), com.erudika:para-search-elasticsearch-v5 (1.30.0) +45 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.6.10)

org.elasticsearch:elasticsearch MAVEN version 5.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.avides.springboot.testcontainer:springboot-testcontainer-elasticsearch =0.1.0-rc6,...

com.code972:elasticsearch-analysis-hebrew (1.2), com.github.alexcojocaru:elasticsearch-maven-plugin (1.2) +59 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (1.0.0)

org.elasticsearch:elasticsearch MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.code972:elasticsearch-analysis-hebrew 1.2 - com.github.alexcojocaru:elasticsearch-maven-plugi...

com.automattic:elasticsearch-statsd (2.0.1.0), com.sksamuel.elastic4s:elastic4s-core-tests_2.10 (>=2.0.0, <=2.0.1) +60 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (2.0.1)

org.elasticsearch:elasticsearch MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 2.0.1.0 - com.sksamuel.elastic4s:elastic4s-core-tests2.10...

com.automattic:elasticsearch-statsd (5.4.2.0), com.bbossgroups.plugins:bboss-plugin-elasticsearch (>=5.0.3.6, <=5.0.3.6.9) +24 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.4.2)

org.elasticsearch:elasticsearch MAVEN version 5.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 5.4.2.0 - com.bbossgroups.plugins:bboss-plugin-elasticsearch...

org.elasticsearch:elasticsearch-analysis-icu (0.12.1), org.elasticsearch:elasticsearch-cloud-aws (0.12.1) +10 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.12.1)

org.elasticsearch:elasticsearch MAVEN version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.12.1 - org.elasticsearch:elasticsearch-cloud-aws...

com.bowriverstudio:fscrawler-elasticsearch-client-v5 (2.6), com.bowriverstudio:fscrawler-es5 (2.6) +74 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.6.15)

org.elasticsearch:elasticsearch MAVEN version 5.6.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.bowriverstudio:fscrawler-elasticsearch-client-v5 2.6 - com.bowriverstudio:fscrawler-es5 2.6 ...

co.diji:elasticsearch-mocksolrplugin (1.1.2), com.sonian:elasticsearch-jetty (0.19.4) +1 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.19.2)

org.elasticsearch:elasticsearch MAVEN version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - co.diji:elasticsearch-mocksolrplugin 1.1.2 - com.sonian:elasticsearch-jetty 0.19.4 -...

cn.patterncat:job-event-store-elasticsearch (0.0.2), com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (1.1.0) +100 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (2.4.4)

org.elasticsearch:elasticsearch MAVEN version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - cn.patterncat:job-event-store-elasticsearch 0.0.2 -...

com.alessandromarrella:fs2-elastic_2.12 (5.6.5), com.erudika:para-search-elasticsearch-v5 (>=1.29.1, <=1.29.2) +26 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.6.9)

org.elasticsearch:elasticsearch MAVEN version 5.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.alessandromarrella:fs2-elastic2.12 5.6.5 - com.erudika:para-search-elasticsearch-v5 =1.29.1,...

org.elasticsearch:elasticsearch-analysis-icu (0.17.5), org.elasticsearch:elasticsearch-cloud-aws (0.17.5) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.17.5)

org.elasticsearch:elasticsearch MAVEN version 0.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.5 - org.elasticsearch:elasticsearch-cloud-aws...

com.alessandromarrella:fs2-elastic_2.12 (>=5.6.0, <=5.6.3), com.automattic:elasticsearch-statsd (5.6.5.0) +30 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.6.5)

org.elasticsearch:elasticsearch MAVEN version 5.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.alessandromarrella:fs2-elastic2.12 =5.6.0, =5.3-7, =5.6.5-17, =0.3.29, =0.3.29, =2.3.2, =2.3....

com.github.tlrx:elasticsearch-test (0.0.8), com.yakaz.elasticsearch.plugins:elasticsearch-action-updatebyquery (1.1.0) +19 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.90.0.beta1)

org.elasticsearch:elasticsearch MAVEN version 0.90.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test 0.0.8 -...

org.elasticsearch.distribution.deb:elasticsearch (2.0.0-beta1), org.elasticsearch.distribution.fully-loaded:elasticsearch (2.0.0-beta1) +26 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (2.0.0-beta1)

org.elasticsearch:elasticsearch MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.distribution.deb:elasticsearch 2.0.0-beta1 -...

org.elasticsearch:elasticsearch-analysis-icu (0.10.0), org.elasticsearch:elasticsearch-client-groovy (0.10.0) +4 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.10.0)

org.elasticsearch:elasticsearch MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.10.0 -...