Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch administrator to view these details.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging     and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive     information such as password hashes or authentication tokens. This could allow an Elasticsearch     administrator to view these details. (CVE-2020-7021)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging
    and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive
    information such as password hashes or authentication tokens. This could allow an Elasticsearch
    administrator to view these details. (CVE-2020-7021)

An update of the elasticsearch package has been released.

ID	Name	Product	Family	Severity
260320	Linux Distros Unpatched Vulnerability : CVE-2020-7021	Nessus	Misc.	medium
414028	SCA: security update for org.elasticsearch:elasticsearch (GHSA-cqgv-256r-m9r8)	Tenable Cloud Security	SCA Checks	medium
414028	SCA: security update for org.elasticsearch:elasticsearch (GHSA-cqgv-256r-m9r8)	Tenable Self-Hosted Container Security	SCA Checks	medium
148821	Photon OS 2.0: Elasticsearch PHSA-2021-2.0-0337	Nessus	PhotonOS Local Security Checks	medium
148812	Photon OS 3.0: Elasticsearch PHSA-2021-3.0-0219	Nessus	PhotonOS Local Security Checks	medium

Detections

Analytics

CVE-2020-7021

medium

Tenable Plugins

medium

medium

medium

medium

medium