Improper Privilege Management in Elasticsearch - CVE-2020-7019
Published: August 18, 2020 / Updated: September 8, 2020
Vulnerability identifier: #VU46361
CSH Severity: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2020-7019
CWE-ID: CWE-269
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Elasticsearch
Elasticsearch
Software vendor:
Elastic Stack
Elastic Stack
Description
The vulnerability allows a remote authenticated user to gain access to sensitive information.
In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index.
Remediation
Install update from vendor's website.