2246 matches found
CVE-2021-22137
In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the...
Design/Logic Flaw
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
UBUNTU-CVE-2021-22135
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
UBUNTU-CVE-2021-22137
In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the...
CVE-2021-22137
CVE-2021-22137 affects Elasticsearch: in versions before 7.11.2 and 6.8.15, a document disclosure flaw occurs when Document or Field Level Security is used. Certain cross-cluster search queries do not properly preserve security permissions, potentially allowing an attacker to determine the existe...
CVE-2021-22137
In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the...
CVE-2021-22135
Elasticsearch CVE-2021-22135 affects versions prior to 7.11.2 and 6.8.15. The vulnerability is a document disclosure flaw in the suggester and profile API when Document and Field Level Security are enabled; the suggester/profile API are normally disabled for an index when DLS is on. Certain queri...
CVE-2021-22135
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
PT-2021-14865 · Elastic · Elasticsearch
Name of the Vulnerable Software and Affected Versions: Elasticsearch versions prior to 7.11.2 Elasticsearch versions prior to 6.8.15 Description: A document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when...
PT-2021-14863 · Elastic · Elasticsearch
Name of the Vulnerable Software and Affected Versions: Elasticsearch versions prior to 7.11.2 Elasticsearch versions prior to 6.8.15 Description: A document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. Normally, the...
Open Distro for Elasticsearch SSRF漏洞（CVE-2021-31828）
SSRF in Open Distro for Elasticsearch CVE-2021-31828 Rotem Bar Published on May 11, 2021 7 min read After an interesting adventure, it's now possible to announce a new CVE-2021-31828 which effects Open Distro for ElasticSearch ODFE , versions until 1.12.0.2. Open Distro is a plugin for...
CVE-2021-31828
An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...
Server side request forgery (ssrf)
An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...
CVE-2021-31828
An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...
CVE-2021-31828
CVE-2021-31828 (ODFE SSRF) affects Open Distro for Elasticsearch (ODFE) until version 1.13.1.0. The issue is an SSRF in the Alerting module that allows an authenticated, existing privileged user to enumerate listening services or interact with configured resources by issuing HTTP requests beyond ...
Server-Side Request Forgery (SSRF)
An SSRF issue in Open Distro for Elasticsearch ODFE allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...
Elasticsearch 代码问题漏洞
Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON . A code issue vulnerability exists in Elasticsearch ODFE Open Distro versions prior...
Photon OS 3.0: Elasticsearch PHSA-2021-3.0-0219
An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0219. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 2.0: Elasticsearch PHSA-2021-2.0-0337
An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0337. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
