In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search     with Field Level Security. If a user runs the same query another more privileged user recently ran, the     scrolling search can leak fields that should be hidden. This could result in an attacker gaining     additional permissions against a restricted index. (CVE-2020-7019)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search
    with Field Level Security. If a user runs the same query another more privileged user recently ran, the
    scrolling search can leak fields that should be hidden. This could result in an attacker gaining
    additional permissions against a restricted index. (CVE-2020-7019)

An update of the elasticsearch package has been released.

Elastic reports :

A field disclosure flaw was found in Elasticsearch when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index.

ID	Name	Product	Family	Type	Severity
261365	Linux Distros Unpatched Vulnerability : CVE-2020-7019	Nessus	Misc.	Local	medium
434165	SCA: security update for org.elasticsearch:elasticsearch (GHSA-c77j-p484-h84m)	Tenable Cloud Security	SCA Checks	Local	medium
434165	SCA: security update for org.elasticsearch:elasticsearch (GHSA-c77j-p484-h84m)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
141638	Photon OS 1.0: Elasticsearch PHSA-2020-1.0-0321	Nessus	PhotonOS Local Security Checks	Local	medium
140661	Photon OS 2.0: Elasticsearch PHSA-2020-2.0-0281	Nessus	PhotonOS Local Security Checks	Local	medium
140410	Photon OS 3.0: Elasticsearch PHSA-2020-3.0-0135	Nessus	PhotonOS Local Security Checks	Local	medium
139740	FreeBSD : textproc/elasticsearch6 -- field disclosure flaw (fbca6863-e2ad-11ea-9d39-00a09858faf5)	Nessus	FreeBSD Local Security Checks	Local	medium

Detections

Analytics

CVE-2020-7019

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium