GHSA-R9FV-QPM9-RJ4G Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch

Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch cluster/settings API, when queried, could leak sensitive configuration information such as passwords, tokens, or usernames. This...

cc.akkaha:asura-core_2.12 (>=0.1.0 <=0.3.0), ch.squaredesk.nova:metrics-elastic (>=4.0.0-beta-1 <=7.0.2) +324 more potentially affected by CVE-2018-3831 via org.elasticsearch:elasticsearch (>=6.0.0 <=6.4.0)

org.elasticsearch:elasticsearch MAVEN version =6.0.0, =0.1.0, =4.0.0-beta-1, =6.0.0, =6.1.1.0, =0.1.0-RC9, =5.0.3.9.6, =0.0.4, =0.1.1808, =1.0, =1.2 and more Source cves: CVE-2018-3831 Source advisory: OSV:GHSA-R9FV-QPM9-RJ4G...

com.automattic:elasticsearch-statsd (>=5.6.0.0 <=5.6.1.0), com.avides.springboot.testcontainer:springboot-testcontainer-elasticsearch (>=0.1.0-RC6 <=0.1.0-RC7) +148 more potentially affected by CVE-2018-3831 via org.elasticsearch:elasticsearch (>=5.6.0 <=5.6.11)

org.elasticsearch:elasticsearch MAVEN version =5.6.0, =5.6.0.0, =0.1.0-RC6, =5.6.0-16, =5.6.0-23, =0.1, =1.8.1, =1.9, =1.23 - com.ubirch.avatar:aws2.11 =0.4.2 - com.ubirch.avatar:util2.11 =0.4.2 and more Source cves: CVE-2018-3831 Source advisory: OSV:GHSA-R9FV-QPM9-RJ4G...

Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch

Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are configured via the API. The Elasticsearch cluster/settings API, when queried, could leak sensitive configuration information such as passwords, tokens, or usernames. This...

ai.grakn:grakn-dist (>=0.7.0 <=0.16.0), ai.grakn:grakn-test (=0.10.0) +1323 more potentially affected by CVE-2019-7611 via org.elasticsearch:elasticsearch (>=0.6.0 <=5.6.14)

org.elasticsearch:elasticsearch MAVEN version =0.6.0, =0.7.0, =0.6.1, =0.11.0, =0.3.0, =1.0.1, =1.0.0, =1.0.0-RELEASE, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =1.4.0 and more Source cves: CVE-2019-7611 Source advisory: OSV:GHSA-FJ32-6V7M-57PG...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0 <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0 <=5.2.1) +484 more potentially affected by CVE-2019-7611 via org.elasticsearch:elasticsearch (>=6.0.0 <=6.6.0)

org.elasticsearch:elasticsearch MAVEN version =6.0.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.RELEASE, =1.1.1.RELEASE, =1.4.2.RELEASE - cn.patterncat:spring-boot-starter-elasticsearch =0.0.1 - cn.xphsc:elasticsearch-rest-plus =1.0.2 and more...

Improper Access Control in Elasticsearch

A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Security are disabled and the aliases, shrink, or split endpoints are used . If the elasticsearch.yml file has xpack.security.dlsfls.enabled set to false, certain permission...

GHSA-FJ32-6V7M-57PG Improper Access Control in Elasticsearch

A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Security are disabled and the aliases, shrink, or split endpoints are used . If the elasticsearch.yml file has xpack.security.dlsfls.enabled set to false, certain permission...

Misconfigured ElasticSearch Servers Exposed 579 GB of Users’ Website Activity

By Waqas In total, two misconfigured ElasticSearch servers belonging to an unknown organization exposed 359,019,902 359 million records that were… This is a post from HackRead.com Read the original post: Misconfigured ElasticSearch Servers Exposed 579 GB of Users’ Website Activity...

Improper Privilege Management API V2

Description There are some api v2 doesn't check permission allow attackers to retrieve/edit information ticket,account,group,department,team,ElasticSearch Proof of Concept Get users list 1. Login. 2. Go to /api/v2/accounts?type=all. 3. Users list return. Create user with admin role 1. Get the adm...

Thousands of Borrowers' Data Exposed from ENCollect Debt Collection Service

An ElasticSearch server instance that was left open on the Internet without a password contained sensitive financial information about loans from Indian and African financial services. The leak, which was discovered by researchers from information security company UpGuard, amounted to 5.8GB and...

CVE-2021-22135

Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...

Cross-Regional Disaster Recovery with Elasticsearch

Unsurprisingly, here at Rewind, we've got a lot of data to protect over 2 petabytes worth. One of the databases we use is called Elasticsearch ES or Opensearch, as it is currently known in AWS. To put it simply, ES is a document database that facilitates lightning-fast search results. Speed is...

VulnCheck KEV: CVE-2014-3120

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code...

Elasticsearch Remote Code Execution Vulnerability

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code...

Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands...

CVE-2022-23708

A flaw was found in the upgrade assistant for Elasticsearch. When upgrading from version 6.x to 7.x, the built-in protections on the security index are disabled, allowing authenticated users to access the index...

S1EM - This Project Is A SIEM With SIRP And Threat Intel, All In One

Today, cyber attacks are more numerous and cause damage in companies. Nevertheless, many software products exist to detect cyber threats. The S1EM solution is based on the principle of bringing together the best products in their field, free of charge, and making them quickly interoperable. S1EM ...

Privilege Escalation

elasticsearch is vulnerable to privilege escalation. An attacker can disable the in-built protections on the security index, leading to access to the current index with index permission...

cn.linham:beecloud-service-core (=5.8.07), cn.linham:beecloud-service-openfeign (=5.8.07) +49 more potentially affected by CVE-2022-23708 via org.elasticsearch:elasticsearch (>=7.16.0 <=7.17.0)

org.elasticsearch:elasticsearch MAVEN version =7.16.0, =0.8.0, =0.8.0, =1.6.1, =1.1.14, =2.6.2, =5.1, =5.1, =7.16.0.0, =3.0.1, =0.11.2, =0.11.2, =0.11.4 and more Source cves: CVE-2022-23708 Source advisory: OSV:GHSA-PGQ6-CCQJ-HPQR...