Design/Logic Flaw

Jenkins Elasticsearch Query Plugin 1.2 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

CVE-2022-34807

CVE-2022-34807 affects Jenkins Elasticsearch Query Plugin 1.2 and earlier. The flaw exposes a password stored unencrypted in the plugin’s global configuration file on the Jenkins controller, enabling access to the password by anyone with Jenkins controller filesystem access. Practically, this is ...

CVE-2022-34807

Jenkins Elasticsearch Query Plugin 1.2 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

PT-2022-22359 · Jenkins · Jenkins Elasticsearch Query Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Elasticsearch Query Plugin versions 1.2 and earlier Description: The issue concerns the storage of a password in an unencrypted form within the global configuration file on the Jenkins controller. Specifically, the password is stored ...

Malicious code in elasticsearch-logstashforwarder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c5d106ab318300020d178054f9edb536b9078fe507062d7b2925fad5725f338 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in elasticsearch-logstash_reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea819fbad1d07f24351eebe09ecc579511bb0dd5641233290ac97d5262c2d5e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2689 Malicious code in elasticsearch-logstashforwarder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c5d106ab318300020d178054f9edb536b9078fe507062d7b2925fad5725f338 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2688 Malicious code in elasticsearch-logstash_reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea819fbad1d07f24351eebe09ecc579511bb0dd5641233290ac97d5262c2d5e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Elasticsearch Database Mess Up Exposed Login, PII Data of 30,000 Students

By Deeba Ahmed The misconfigured Elasticsearch database apparently belonged to the US-based software solution provider Transact Campus. SafetyDetectives’ cybersecurity research team… This is a post from HackRead.com Read the original post: Elasticsearch Database Mess Up Exposed Login, PII Data of...

A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request.

...

CVE-2022-23712

A flaw was found in Elasticsearch. This flaw allows an unauthenticated attacker to forcibly shut down an Elasticsearch node with a specifically formatted network request, affecting system availability...

Denial Of Service (DoS)

org.elasticsearch:elasticsearch is vulnerable to denial of service DoS attacks. A malicious unauthenticated user is able to forcibly shut down an elasticsearch node and cause denial of service conditions via a specifically formatted network request...

Elasticsearch Denial of Service Vulnerability

Elasticsearch is a search engine based on the Lucene library. A denial of service vulnerability exists in Elasticsearch versions 8.0.0 included through 8.2.1 not included. An unauthenticated attacker could exploit the vulnerability to forcefully shut down an Elasticsearch node via a network reque...

com.farcsal.dql:query-es (=0.8.0), com.github.msarhan:elasticsearch-analysis-arabic (>=1.2.0 <=1.4.0) +15 more potentially affected by CVE-2022-23712 via org.elasticsearch:elasticsearch (>=8.0.0 <=8.2.0)

org.elasticsearch:elasticsearch MAVEN version =8.0.0, =1.2.0, =2.6.7, =8.9.0-alpha5, =8.9.0-alpha5, =0.83.0, =6.12, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.2.0, =8.19.16 - org.ff4j:ff4j-store-elastic =2.1 - org.opennms.elasticsearch:elasticsearch-drift-plugin-8.18.2 =2.0.7 and more Source cves...

Improper Check for Unusual or Exceptional Conditions in Elasticsearch

A Denial of Service flaw was discovered in Elasticsearch 8.0.0 through 8.2.0. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request. Version 8.2.1 contains a patch...

GHSA-WH6W-69XC-5RQ5 Improper Check for Unusual or Exceptional Conditions in Elasticsearch

A Denial of Service flaw was discovered in Elasticsearch 8.0.0 through 8.2.0. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request. Version 8.2.1 contains a patch...

Elastic Elasticsearch Java Vulnerability (ESA-2022-06)

Elastic Elasticsearch is prone to a vulnerability in Java. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:elasticsearch"...

Elastic Elasticsearch DoS Vulnerability (ESA-2022-07)

Elastic Elasticsearch is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2022-23712

A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request...

CVE-2022-23712

A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request...