Privilege Escalation

github.com/opensearch-project/opensearch-cli is vulnerable to Privilege Escalation. The vulnerability exists due to the weak file path permission in the configuration file, allowing an attacker to read or write any file on the file path...

CVE-2021-44833

The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file...

PT-2021-24158

Name of the Vulnerable Software and Affected Versions: Amazon AWS OpenSearch CLI version 1.0.0 Description: The issue concerns weak permissions for the configuration file in the CLI for Amazon AWS OpenSearch. Recommendations: For Amazon AWS OpenSearch CLI version 1.0.0, consider restricting acces...