Linux Distros Unpatched Vulnerability : CVE-2021-22135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and...

CVE-2021-22135

creationtimestamp| type| source ---|---|--- 2024-01-28 05:36:43+00:00| seen| https://t.me/arpsyndicate/3219...

Security Bulletin: IBM Security SOAR is using a version of Elasticsearch that has known vulnerabilities (CVE-2021-22137, CVE-2021-22135)

Summary IBM Security SOAR is using a version of Elasticsearch that has known vulnerabilities. A recent update has addressed these issues. Vulnerability Details CVEID: CVE-2021-22137 DESCRIPTION: Elasticsearch could allow a remote authenticated attacker to obtain sensitive information, caused by a...

com.github.tlrx:elasticsearch-test (0.90.6), com.sksamuel.elastic4s:elastic4s_2.10 (0.90.6.0) +9 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.90.6)

org.elasticsearch:elasticsearch MAVEN version 0.90.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test 0.90.6 - com.sksamuel.elastic4s:elastic4s2.10 0.90.6.0 -...

at.molindo:esi4j (>=0.3.0-alpha-1, <=0.3.0-alpha-3), com.blacklocus.jres:jres-test (>=0.1.13, <=0.1.14) +17 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.90.7)

org.elasticsearch:elasticsearch MAVEN version 0.90.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j =0.3.0-alpha-1, =0.1.13, =0.1.1, =0.5.0, =0.2.0, =0.90.7.1, =0.8.1-0907,...

com.github.kzwang:elasticsearch-osem (1.0.0), com.github.kzwang:elasticsearch-transport-redis (1.0.0) +13 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.90.10)

org.elasticsearch:elasticsearch MAVEN version 0.90.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.kzwang:elasticsearch-osem 1.0.0 - com.github.kzwang:elasticsearch-transport-redis...

at.molindo:esi4j (>=0.3.0, <=0.3.2), com.code972:elasticsearch-analysis-hebrew (1.0) +13 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.90.11)

org.elasticsearch:elasticsearch MAVEN version 0.90.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j =0.3.0, =0.3.2 - com.code972:elasticsearch-analysis-hebrew 1.0 -...

org.codelibs:elasticsearch-dataformat (1.2.0) potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (1.2.4)

org.elasticsearch:elasticsearch MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.codelibs:elasticsearch-dataformat 1.2.0 Source cves: CVE-2021-22135 Source advisory:...

com.automattic:elasticsearch-statsd (>=2.3.3.0, <=2.3.3.1), com.erudika:para-server (>=1.18.4, <=1.19.0) +105 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (2.3.3)

org.elasticsearch:elasticsearch MAVEN version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd =2.3.3.0, =1.18.4, =2.3-3, =2.3.3.0-rc1, =2.3-5, =2.3-4,...

com.kwince.contribs:osemmanager (0.0.1), org.elasticsearch:elasticsearch-analysis-icu (>=0.18.5, <=1.1.0) +16 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.18.5)

org.elasticsearch:elasticsearch MAVEN version 0.18.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.kwince.contribs:osemmanager 0.0.1 - org.elasticsearch:elasticsearch-analysis-icu =0.18.5,...

org.elasticsearch:elasticsearch-analysis-icu (0.16.1), org.elasticsearch:elasticsearch-cloud-aws (0.16.1) +11 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.16.1)

org.elasticsearch:elasticsearch MAVEN version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.16.3), org.elasticsearch:elasticsearch-cloud-aws (0.16.3) +11 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.16.3)

org.elasticsearch:elasticsearch MAVEN version 0.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.3 - org.elasticsearch:elasticsearch-cloud-aws...

com.github.tlrx:elasticsearch-test (>=0.0.5, <=0.0.6), org.tynamo:tapestry-model-jpa (>=0.5.0, <=0.6.0) potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.20.0.rc1)

org.elasticsearch:elasticsearch MAVEN version 0.20.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test =0.0.5, =0.5.0, =0.6.0 Source cves: CVE-2021-22135 Source...

com.sonian:elasticsearch-equilibrium (0.20.0), com.sonian:elasticsearch-jetty (>=0.20.0, <=0.20.1) +2 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.20.2)

org.elasticsearch:elasticsearch MAVEN version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sonian:elasticsearch-equilibrium 0.20.0 - com.sonian:elasticsearch-jetty =0.20.0, =0.20.2-0....

com.github.kzwang:elasticsearch-osem (2.0.0.rc1), com.github.kzwang:elasticsearch-repository-gridfs (1.0.0.rc1) +8 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (1.0.0.rc2)

org.elasticsearch:elasticsearch MAVEN version 1.0.0.rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.kzwang:elasticsearch-osem 2.0.0.rc1 -...

com.sksamuel.elastic4s:elastic4s_2.10 (1.0.3.0) potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (1.0.3)

org.elasticsearch:elasticsearch MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 1.0.3.0 Source cves: CVE-2021-22135 Source advisory:...

org.elasticsearch:elasticsearch-analysis-icu (0.17.8), org.elasticsearch:elasticsearch-cloud-aws (0.17.8) +11 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.17.8)

org.elasticsearch:elasticsearch MAVEN version 0.17.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.8 - org.elasticsearch:elasticsearch-cloud-aws...

com.clever-age:play2-elasticsearch (0.8.1), com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (>=1.7.1, <=1.7.2) +18 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.90.5)

org.elasticsearch:elasticsearch MAVEN version 0.90.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.clever-age:play2-elasticsearch 0.8.1 -...

de.spinscale:elasticsearch-plugin-suggest (0.19.11-0.1) potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.19.11)

org.elasticsearch:elasticsearch MAVEN version 0.19.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.11-0.1 Source cves: CVE-2021-22135 Source...

de.spinscale:elasticsearch-plugin-suggest (0.19.12-0.2) potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.19.12)

org.elasticsearch:elasticsearch MAVEN version 0.19.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - de.spinscale:elasticsearch-plugin-suggest 0.19.12-0.2 Source cves: CVE-2021-22135 Source...