[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0x0I6xpYlYen2-QNlUTlvmw-E09kVp0EMjZpnCglPAs":3,"g5a-risk:CVE-2019-7611":111},{"success":4,"data":5,"meta":109},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":25,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":57,"weaknesses":58,"weaknessesCount":47,"isActivelyExploited":67,"cisaInfo":25,"otxData":25,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":107,"notableEvents":108},"CVE-2019-7611","What is CVE-2019-7611?","A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Security are disabled and the _aliases, _shrink, or _split endpoints are used . If the elasticsearch.yml file has xpack.security.dls_fls.enabled set to false, certain permission checks are skipped when users perform one of the actions mentioned above, to make existing data available under a new index\u002Falias name. This could result in an attacker gaining additional permissions against a restricted index.","A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Security are disabled and the _al...","2019-03-25T19:29:02.257","2020-10-19T18:10:07.32",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":33,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":33,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.02149,[38,38,38,38,38,38,38],"High",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"elastic","elasticsearch","*","cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*",1,[49,54],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fdiscuss.elastic.co\u002Ft\u002Felastic-stack-6-6-1-and-5-6-15-security-update\u002F169077","Elastic",[53],"Vendor Advisory",{"url":55,"source":51,"tags":56},"https:\u002F\u002Fwww.elastic.co\u002Fcommunity\u002Fsecurity",[53],2,[59],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",false,[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2019-7611? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-7611, a high severity cyber security vulnerability from 2019. A permission issue was found in Elasticsearch versions befor...","CVE-2019-7611, CVE-2019-7611 vulnerability, CVE-2019-7611 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, elastic security, elasticsearch vulnerability","\u002Fwhat-is\u002Fcve-2019-7611",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":10,"dateModified":11,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-7611","Cybersecurity","CVE-2019-7611, CVE-2019-7611 vulnerability, CVE-2019-7611 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95],{"Operator":25,"Negate":25,"Nodes":96},[97],{"Operator":98,"Negate":25,"CPEMatch":99},"OR",[100,103],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":101,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":102,"VersionEndIncluding":25},"DE497C38-A3FA-4035-B170-5C58AAC425AE","5.6.15",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":104,"VersionStartExcluding":25,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":25},"BFDDB30B-F1F5-4D7F-A7AA-8335B15FA9E8","6.0.0","6.6.1",[],[],{"lastModified":11,"cacheTime":110,"version":31},1792260079261,{"score":112,"band":113,"action":114,"scoredAt":115},46,"Medium","Plan remediation","2026-10-16T06:45:52.29697+00:00"]