Do these security vulnerabilities apply to the OSS distributions of Elasticsearch? [image] NVD - CVE-2020-7020 [image] NVD - CVE-2020-7019 [image] NVD - CVE-2020-7014 [image] NVD …

These only affect Elasticsearch running with security enabled, they do not affect the OSS version. As pointed out, I would suggest using our free security [image] Security for Elasticsearch is now free We are thrilled to announce that the core security features of the Elastic Stack -- l…

Elasticsearch Vulnerabilities

Elastic Stack Elasticsearch

Christian_Dahlqvist (Christian Dahlqvist) December 8, 2020, 4:39pm 5

Can you create a CVE for a system without security? If you care about security you should not run a vanilla OSS Elasticsearch cluster.

Topic		Replies	Views
Some vulnerabilities in Elasticsearch v7.10.0 Elasticsearch	3	601	December 10, 2021
Elastic Stack 7.9.3 and 6.8.13 Security Update Security Announcements	1	14595	November 4, 2022
Elasticsearch 1.4 and 1.6 vulnerability differences Elasticsearch	2	385	July 6, 2017
Elasticsearch OSS Elasticsearch	5	765	January 17, 2022
Elasticsearch 1.5.2 and 1.4.5 released Elasticsearch	1	613	July 6, 2017

Elasticsearch Vulnerabilities

Related topics