Lucene search
Veracode Vulnerability DatabaseVERACODE:32124HistorySep 16, 2021 - 1:40 a.m.
Information Disclosure
2021-09-1601:40:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
44.8%
elasticsearch is vulnerable to information disclosure. The vulnerability exists due to lack of security level applied to searchable snapshots, allowing an attacker to gain access to unauthorized information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elasticsearch/elasticsearch | le | 7.14.x-dev | |
| elasticsearch/elasticsearch | le | 7.14.x-dev |
Related
osv
osv
CVE-2021-22147
2021-09-15 12:15:08
BIT-elasticsearch-2021-22147
2024-03-06 10:52:52
Exposure of sensitive information in Elasticsearch
2021-09-20 20:29:40
redhatcve
redhatcve
CVE-2021-22147
2021-08-04 18:23:26
cvelist
cvelist
CVE-2021-22147
2021-09-15 11:36:19
openvas
openvas
Elastic Elasticsearch Information Disclosure Vulnerability (ESA-2021-18)
2021-09-16 00:00:00
nvd
nvd
CVE-2021-22147
2021-09-15 12:15:08
cve
cve
CVE-2021-22147
2021-09-15 12:15:08
prion
prion
Information disclosure
2021-09-15 12:15:00
github
github
Exposure of sensitive information in Elasticsearch
2021-09-20 20:29:40
