mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-12-22 04:17:44 +00:00
Code Issues Releases Activity

security/vuxml: Document textproc/elasticsearch6 vulnerability

Browse Source 
PR:		248761
Submitted by:	Juraj Lutter <juraj@lutter.sk> (maintainer)
This commit is contained in:
Dmitri Goutnik 2020-08-20 11:54:30 +00:00
parent 1a3e10283d
commit 7276747700
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=545531
1 changed files with 32 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
security/vuxml/vuln.xml
View File

@ -58,6 +58,38 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="fbca6863-e2ad-11ea-9d39-00a09858faf5">
<topic>textproc/elasticsearch6 -- field disclosure flaw</topic>
<affects>
<package>
<name>elasticsearch6</name>
<range><lt>6.8.12</lt></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>Elastic reports:</p>
<blockquote cite="https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456">
<p>A field disclosure flaw was found in Elasticsearch when running
a scrolling search with Field Level Security. If a user runs
the same query another more privileged user recently ran,
the scrolling search can leak fields that should be hidden.
This could result in an attacker gaining additional permissions
against a restricted index.</p>
</blockquote>
</body>
</description>
<references>
<cvename>CVE-2020-7019</cvename>
<url>https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456</url>
<url>https://github.com/elastic/elasticsearch/pull/39490</url>
</references>
<dates>
<discovery>2020-08-19</discovery>
<entry>2020-08-20</entry>
</dates>
</vuln>
<vuln vid="08de38d2-e2d0-11ea-9538-0c9d925bbbc0">
<topic>adns -- multiple vulnerabilities</topic>
<affects>