SUSE CVE-2020-7019

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attack...

CVE-2020-7019 affecting package rubygem-elasticsearch 7.6.0-1

CVE-2020-7019 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...

com.clever-age:play2-elasticsearch (0.8.1), com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (>=1.7.1, <=1.7.2) +18 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.90.5)

org.elasticsearch:elasticsearch MAVEN version 0.90.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.clever-age:play2-elasticsearch 0.8.1 -...

com.sksamuel.elastic4s:elastic4s_2.10 (0.90.9.0), com.sksamuel.elasticsearch:elasticsearch-river-neo4j (0.90.9.0) +15 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.90.9)

org.elasticsearch:elasticsearch MAVEN version 0.90.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 0.90.9.0 -...

org.elasticsearch:elasticsearch-analysis-icu (0.18.2), org.elasticsearch:elasticsearch-cloud-aws (0.18.2) +11 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.18.2)

org.elasticsearch:elasticsearch MAVEN version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.2 - org.elasticsearch:elasticsearch-cloud-aws...

com.kwince.contribs:osemmanager (0.0.1), org.elasticsearch:elasticsearch-analysis-icu (>=0.18.5, <=1.1.0) +16 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.18.5)

org.elasticsearch:elasticsearch MAVEN version 0.18.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.kwince.contribs:osemmanager 0.0.1 - org.elasticsearch:elasticsearch-analysis-icu =0.18.5,...

org.dspace.modules:additions (>=3.0-rc2, <=3.6), org.dspace.modules:jspui (>=3.0-rc1, <=3.6) +27 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.18.6)

org.elasticsearch:elasticsearch MAVEN version 0.18.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.dspace.modules:additions =3.0-rc2, =3.0-rc1, =3.0-rc1, =3.0-rc2, =3.0-rc1, =3.0-rc1, =3.0-rc...

org.elasticsearch:elasticsearch-analysis-icu (0.16.1), org.elasticsearch:elasticsearch-cloud-aws (0.16.1) +11 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.16.1)

org.elasticsearch:elasticsearch MAVEN version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.1 - org.elasticsearch:elasticsearch-cloud-aws...

fr.pilato.spring:spring-elasticsearch (>=0.0.1, <=0.0.2), org.fusesource.insight:insight-elasticsearch (>=7.1.0.fuse-047, <=7.2.0.redhat-060) +1 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.19.4)

org.elasticsearch:elasticsearch MAVEN version 0.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - fr.pilato.spring:spring-elasticsearch =0.0.1, =7.1.0.fuse-047, =7.1.0.fuse-047, =7.2.0.redhat-06...

fr.pilato.elasticsearch.river:fsriver (0.0.2), io.searchbox:jest (0.0.1) potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.19.8)

org.elasticsearch:elasticsearch MAVEN version 0.19.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - fr.pilato.elasticsearch.river:fsriver 0.0.2 - io.searchbox:jest 0.0.1 Source cves: CVE-2020-7019...

io.github.ryan-za:async-elastic-orm (0.2.2) potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.0.0.beta2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - io.github.ryan-za:async-elastic-orm 0.2.2 Source cves: CVE-2020-7019 Source advisory:...

com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings (1.3.0), com.yakaz.elasticsearch.plugins:elasticsearch-analysis-combo (>=1.5.0, <=1.5.1) +25 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.0.0.rc1)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings 1.3.0 -...

com.code972:elasticsearch-analysis-hebrew (1.2), com.github.alexcojocaru:elasticsearch-maven-plugin (1.2) +59 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.0.0)

org.elasticsearch:elasticsearch MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.code972:elasticsearch-analysis-hebrew 1.2 - com.github.alexcojocaru:elasticsearch-maven-plugi...

com.github.alexcojocaru:elasticsearch-maven-plugin (1.4), com.github.joschi:dropwizard-elasticsearch (0.2.1) +2 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.0.2)

org.elasticsearch:elasticsearch MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.alexcojocaru:elasticsearch-maven-plugin 1.4 - com.github.joschi:dropwizard-elasticsear...

com.github.richardwill98.elasticsearch:elasticsearch-river-mongodb (1.6.2), com.github.tlrx:elasticsearch-test (0.0.7) +1 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.20.1)

org.elasticsearch:elasticsearch MAVEN version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwill98.elasticsearch:elasticsearch-river-mongodb 1.6.2 -...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (1.6.5), fr.pilato.spring:spring-elasticsearch (0.1.0) +1 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.20.6)

org.elasticsearch:elasticsearch MAVEN version 0.20.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 1.6.5 -...

com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings (>=1.0.0, <=1.0.1) potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.90.0.rc1)

org.elasticsearch:elasticsearch MAVEN version 0.90.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings =1.0.0, =1.0.1 Source...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (1.6.9), com.github.tlrx:elasticsearch-test (0.0.9) +14 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.90.1)

org.elasticsearch:elasticsearch MAVEN version 0.90.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 1.6.9 -...

com.github.tlrx:elasticsearch-test (0.90.6), com.sksamuel.elastic4s:elastic4s_2.10 (0.90.6.0) +9 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.90.6)

org.elasticsearch:elasticsearch MAVEN version 0.90.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test 0.90.6 - com.sksamuel.elastic4s:elastic4s2.10 0.90.6.0 -...

com.sksamuel.elastic4s:elastic4s_2.10 (>=0.90.8.0, <=0.90.8.2), com.sksamuel.elasticsearch:elasticsearch-river-neo4j (0.90.8.0) +7 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (0.90.8)

org.elasticsearch:elasticsearch MAVEN version 0.90.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 =0.90.8.0, =0.90.8.2 -...