Linux Distros Unpatched Vulnerability : CVE-2024-23444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing...

Security Bulletin: Vulnerability in elasticsearch affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.

Summary Potential vulnerability in elasticsearch has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. The vulnerability have been addressed. Refer to details for additional information...

Security Bulletin: Vulnerability in Elasticsearch affects watsonx.data

Summary Elastic Elasticsearch could allow a remote authenticated attacker to obtain sensitive information. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-23444 DESCRIPTION: Elastic Elasticsearch could allow a remote authenticated attacker to obtain sensitive information,...

Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2024-23444)

Summary IBM Security SOAR uses an older version of ElasticSearch that may be identified and exploited. An update has been released which addresses these issues. It is recommended upgrading to Version 51.0.4.0 or later of IBM Security SOAR. Vulnerability Details CVEID:CVE-2024-23444 DESCRIPTION:...

Security Bulletin: Vulnerability in Elastic Elasticsearch ( CVE-2024-23444) affects IBM Watson CP4D Data Stores

Summary A potential information disclosure vulnerability CVE-2024-23444 has been identified related to Elastic Elasticsearch that affects IBM Watson CP4D Data Stores. This vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-23444...

com.automattic:elasticsearch-statsd (2.4.5.0), com.floragunn:dlic-search-guard-module-auditlog (2.4-5) +48 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (2.4.5)

org.elasticsearch:elasticsearch MAVEN version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 2.4.5.0 - com.floragunn:dlic-search-guard-module-auditlog 2.4...

ai.ylyue:yue-library-data-es (>=j8.2.2.0, <=j11.2.6.2), br.com.simpli:simpli-ws (>=1.2.1, <=2.2.0) +1023 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (>=7.0.0-alpha1, <=7.17.22)

org.elasticsearch:elasticsearch MAVEN version =7.0.0-alpha1, =j8.2.2.0, =1.2.1, =0.0.1-alpha, =5.3.0, =5.6.5, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =6.2.0, =6.8.0, =6.4.0, =5.3.0, =5.3.0, =5.3.0, =5.4.0 and more Source cves: CVE-2024-23444 Source advisory: OSV:GHSA-5V8F-XX9M-WJ44...

org.elasticsearch:elasticsearch-analysis-icu (0.18.2), org.elasticsearch:elasticsearch-cloud-aws (0.18.2) +11 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.18.2)

org.elasticsearch:elasticsearch MAVEN version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.2 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.16.5), org.elasticsearch:elasticsearch-cloud-aws (0.16.5) +11 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.16.5)

org.elasticsearch:elasticsearch MAVEN version 0.16.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.5 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.17.0), org.elasticsearch:elasticsearch-cloud-aws (0.17.0) +11 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.17.0)

org.elasticsearch:elasticsearch MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.0 - org.elasticsearch:elasticsearch-cloud-aws...

com.github.tlrx:elasticsearch-test (>=0.0.5, <=0.0.6), org.tynamo:tapestry-model-jpa (>=0.5.0, <=0.6.0) potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.20.0.rc1)

org.elasticsearch:elasticsearch MAVEN version 0.20.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test =0.0.5, =0.5.0, =0.6.0 Source cves: CVE-2024-23444 Source...

com.sonian:elasticsearch-equilibrium (0.20.0), com.sonian:elasticsearch-jetty (>=0.20.0, <=0.20.1) +2 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.20.2)

org.elasticsearch:elasticsearch MAVEN version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sonian:elasticsearch-equilibrium 0.20.0 - com.sonian:elasticsearch-jetty =0.20.0, =0.20.2-0....

com.erudika:para (>=1.1.2, <=1.5.0), com.erudika:para-web (1.1.4) +16 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (1.1.1)

org.elasticsearch:elasticsearch MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.erudika:para =1.1.2, =0.8.0, =1.1.1.0, =1.1.1.1, =1.7, =1.7.2 -...

org.elasticsearch:elasticsearch-analysis-icu (0.16.4), org.elasticsearch:elasticsearch-cloud-aws (0.16.4) +11 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.16.4)

org.elasticsearch:elasticsearch MAVEN version 0.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.4 - org.elasticsearch:elasticsearch-cloud-aws...

com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings (1.2.0), com.yakaz.elasticsearch.plugins:elasticsearch-action-updatebyquery (1.3.0) +3 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.90.4)

org.elasticsearch:elasticsearch MAVEN version 0.90.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings 1.2.0 -...

com.github.chytreg:elasticsearch-analysis-morfologik (2.0.0), com.github.lbroudoux.elasticsearch:amazon-s3-river (>=0.0.1, <=0.0.2) +25 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.90.0)

org.elasticsearch:elasticsearch MAVEN version 0.90.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.chytreg:elasticsearch-analysis-morfologik 2.0.0 -...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (1.6.9), com.github.tlrx:elasticsearch-test (0.0.9) +14 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.90.1)

org.elasticsearch:elasticsearch MAVEN version 0.90.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 1.6.9 -...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (1.6.11), com.github.tlrx:elasticsearch-river-ldap (0.0.2) +10 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.90.2)

org.elasticsearch:elasticsearch MAVEN version 0.90.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 1.6.11 -...

com.github.tlrx:elasticsearch-test (0.90.6), com.sksamuel.elastic4s:elastic4s_2.10 (0.90.6.0) +9 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.90.6)

org.elasticsearch:elasticsearch MAVEN version 0.90.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test 0.90.6 - com.sksamuel.elastic4s:elastic4s2.10 0.90.6.0 -...

at.molindo:esi4j (>=0.3.0-alpha-1, <=0.3.0-alpha-3), com.blacklocus.jres:jres-test (>=0.1.13, <=0.1.14) +17 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.90.7)

org.elasticsearch:elasticsearch MAVEN version 0.90.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j =0.3.0-alpha-1, =0.1.13, =0.1.1, =0.5.0, =0.2.0, =0.90.7.1, =0.8.1-0907,...