UpHeron
All vulnerabilities

Servers and applications

CVE-2020-7014

The fix for CVE-2020-7009 was found to be incomplete. Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys and also authentication tokens. An attacker who is able to generate an API key and an authentication token can perform a series of steps that result in an authentication token being generated with…

Severity
High 8.8
Published
3 Jun 2020
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
ElasticsearchServers and applications · cpe:a:elastic:elasticsearch
  • From 6.7.0 up to 6.8.7
  • From 7.0.0 up to 7.6.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-7014
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-7014