CVE-2021-22149

2021-09-1511:44:31

CWE-732

elastic

www.cve.org

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated attacker could utilize API keys belonging to higher privileged users.

CNA Affected

[
  {
    "product": "Elastic Enterprise Search",
    "vendor": "Elastic",
    "versions": [
      {
        "status": "affected",
        "version": "before 7.14.0"
      }
    ]
  }
]