Vulnerability · Published Mar 31, 2020 · Assigned by elastic
CVE-2020-7009
High 8.8
In plain English
A high-severity security flaw in Elasticsearch from Elastic. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)8.8High
Exploit odds (30 days)1.9%top 20.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is able to generate an API key can perform a series of steps that result in an API key being generated with elevated privileges.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.elasticsearch:elasticsearch | 6.8.8 | GHSA-gfv5-grx2-9jw2 |
| Maven | org.elasticsearch:elasticsearch | 7.6.2 | GHSA-gfv5-grx2-9jw2 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Elastic | Elasticsearch | All versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 |
Weakness: CWE-266
References
- https://www.elastic.co/community/security/ x_refsource_MISC
- https://discuss.elastic.co/t/elastic-stack-6-8-8-and-7-6-2-security-update/225920 x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20200403-0004/ x_refsource_CONFIRM