Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 5

Количество 5

ubuntu логотип

CVE-2021-22145

около 5 лет назад

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.

CVSS3: 6.5
EPSS: Высокий
redhat логотип

CVE-2021-22145

около 5 лет назад

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.

CVSS3: 7.3
EPSS: Высокий
nvd логотип

CVE-2021-22145

около 5 лет назад

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.

CVSS3: 6.5
EPSS: Высокий
debian логотип

CVE-2021-22145

около 5 лет назад

A memory disclosure vulnerability was identified in Elasticsearch 7.10 ...

CVSS3: 6.5
EPSS: Высокий
github логотип

GHSA-q394-h7f5-7f44

больше 4 лет назад

Generation of Error Message Containing Sensitive Information in Elasticsearch

CVSS3: 6.5
EPSS: Высокий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-22145

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.

CVSS3: 6.5
76%
Высокий
около 5 лет назад
redhat логотип
CVE-2021-22145

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.

CVSS3: 7.3
76%
Высокий
около 5 лет назад
nvd логотип
CVE-2021-22145

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.

CVSS3: 6.5
76%
Высокий
около 5 лет назад
debian логотип
CVE-2021-22145

A memory disclosure vulnerability was identified in Elasticsearch 7.10 ...

CVSS3: 6.5
76%
Высокий
около 5 лет назад
github логотип
GHSA-q394-h7f5-7f44

Generation of Error Message Containing Sensitive Information in Elasticsearch

CVSS3: 6.5
76%
Высокий
больше 4 лет назад

Уязвимостей на страницу