Language:
Severity: Medium
ID: 200480
File Name: elasticsearch_ESA-2024-14.nasl
Version: 1.4
Type: combined
Agent: unix
Family: Misc.
Published: 6/13/2024
Updated: 10/4/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Factor: Medium
Score: 4.4
Risk Factor: Medium
Base Score: 6.1
Temporal Score: 4.5
Vector: CVSS2#AV:N/AC:L/Au:M/C:N/I:N/A:C
CVSS Score Source: CVE-2024-37280
Risk Factor: Medium
Base Score: 4.9
Temporal Score: 4.3
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CPE: cpe:/a:elastic:elasticsearch, cpe:/a:elasticsearch:elasticsearch
Required KB Items: installed_sw/Elasticsearch
Exploit Ease: No known exploits are available
Patch Publication Date: 6/5/2024
Vulnerability Publication Date: 6/5/2024
CVE: CVE-2024-37280
IAVA: 2024-A-0337