Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-22147

Опубликовано: 15 сент. 2021
Источник: debian
EPSS Низкий

Описание

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
elasticsearchremovedpackage

EPSS

Процентиль: 62%
0.01037
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 5 лет назад

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.

CVSS3: 5.7
redhat
около 5 лет назад

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.

CVSS3: 6.5
nvd
почти 5 лет назад

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.

CVSS3: 6.5
github
почти 5 лет назад

Exposure of sensitive information in Elasticsearch

EPSS

Процентиль: 62%
0.01037
Низкий