{"api_version":"1","generated_at":"2026-07-23T19:55:19+00:00","cve":"CVE-2020-7019","urls":{"html":"https://cve.report/CVE-2020-7019","api":"https://cve.report/api/cve/CVE-2020-7019.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-7019","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-7019"},"summary":{"title":"CVE-2020-7019","description":"In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index.","state":"PUBLIC","assigner":"security@elastic.co","published_at":"2020-08-18 17:15:00","updated_at":"2023-01-27 20:50:00"},"problem_types":["CWE-269"],"metrics":[],"references":[{"url":"https://security.netapp.com/advisory/ntap-20200827-0001/","name":"https://security.netapp.com/advisory/ntap-20200827-0001/","refsource":"CONFIRM","tags":[],"title":"CVE-2020-7019 Elasticsearch Vulnerability in NetApp Products | NetApp Product Security","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456","name":"https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456","refsource":"MISC","tags":["Vendor Advisory"],"title":"Elastic Stack 7.9.0 and 6.8.12 Security Update - Security Announcements - Discuss the Elastic Stack","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7019","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7019","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"7019","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"elastic","cpe5":"elasticsearch","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"7019","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"elastic","cpe5":"elasticsearch","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2020-7019","qid":"690452","title":"Free Berkeley Software Distribution (FreeBSD) Security Update for textproc/elasticsearch6 (fbca6863-e2ad-11ea-9d39-00a09858faf5)"},{"cve":"CVE-2020-7019","qid":"900438","title":"Common Base Linux Mariner (CBL-Mariner) Security Update for rubygem-elasticsearch (6273)"},{"cve":"CVE-2020-7019","qid":"902011","title":"Common Base Linux Mariner (CBL-Mariner) Security Update for rubygem-elasticsearch (6273-1)"}]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ASSIGNER":"security@elastic.co","ID":"CVE-2020-7019","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Elastic","product":{"product_data":[{"product_name":"Elasticsearch","version":{"version_data":[{"version_value":"before 7.9.0"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-270: Privilege Context Switching Error"}]}]},"references":{"reference_data":[{"url":"https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456","refsource":"MISC","name":"https://discuss.elastic.co/t/elastic-stack-7-9-0-and-6-8-12-security-update/245456"},{"refsource":"CONFIRM","name":"https://security.netapp.com/advisory/ntap-20200827-0001/","url":"https://security.netapp.com/advisory/ntap-20200827-0001/"}]},"description":{"description_data":[{"lang":"eng","value":"In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index."}]}},"nvd":{"publishedDate":"2020-08-18 17:15:00","lastModifiedDate":"2023-01-27 20:50:00","problem_types":["CWE-269"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.9.0","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*","versionEndExcluding":"6.8.12","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"7019","Ordinal":"167290","Title":"CVE-2020-7019","CVE":"CVE-2020-7019","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"7019","Ordinal":"1","NoteData":"In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker gaining additional permissions against a restricted index.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"7019","Ordinal":"2","NoteData":"2020-08-18","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"7019","Ordinal":"3","NoteData":"2020-08-27","Type":"Other","Title":"Modified"}]}}}