CVE-2020-7010

Katalog CVE

CVSS 7.5 · High EPSS 1,4%

Kerentanan Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) pada elastic cloud on kubernetes. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able to determine when the current Elastic Stack cluster was deployed they may be able to more easily brute force the Elasticsearch credentials generated by ECK.

Rincian

Terbit di NVD

3 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.elastic.co/community/security/ advisory vendor