CPE Details
Elastic Search Elastic Cloud Enterprise 2.0.0
2.0.0
2019-09-26
13h40 +00:00
13h40 +00:00
2019-09-26
13h40 +00:00
13h40 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:elastic:elastic_cloud_enterprise:2.0.0:*:*:*:*:*:*:*
Informations
Vendor
elasticProduct
elastic_cloud_enterpriseVersion
2.0.0Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
17h36 +00:00 |
An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could force an Elasticsearch node to exit with an OutOfMemory error by sending a moderate number of malformed HTTP requests. The issue was identified by Elastic Engineering and we have no indication that the issue is known or that it is being exploited in the wild. | 7.5 |
High |
|
17h34 +00:00 |
A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster. | 5.3 |
Medium |
|
15h25 +00:00 |
A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or deployment logs in the Logging and Monitoring cluster. The affected APIs are PATCH /api/v1/user and PATCH /deployments/{deployment_id}/elasticsearch/{ref_id}/keystore | 6.5 |
Medium |
2025©
tesweb SA
