Staging Environment: Content and features may be unstable or change without notice.

Extra Mitigation Curation

ubuntu_osv/UBUNTU-CVE-2020-7021

Progress 0 / 0

Advisory Summary

ubuntu_osv/UBUNTU-CVE-2020-7021

Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch administrator to view these details.
Mitigation Type Mitigation Data Mitigation Note