Lucene search
PRIOn knowledge basePRION:CVE-2021-22145HistoryJul 21, 2021 - 3:15 p.m.
Design/Logic Flaw
2021-07-2115:15:00
PRIOn knowledge base
www.prio-n.com
10
A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elasticsearch | ge | 7.10.0 | |
| elasticsearch | le | 7.13.3 | |
| communications_cloud_native_core_automated_test_suite | eq | 1.8.0 |
Related
osv
osv
CVE-2021-22145
2021-07-21 15:15:14
BIT-elasticsearch-2021-22145
2024-03-06 10:53:12
ubuntucve
ubuntucve
CVE-2021-22145
2021-07-21 00:00:00
redhatcve
redhatcve
CVE-2021-22145
2021-07-22 17:20:12
zdt
zdt
ElasticSearch 7.13.3 - Memory disclosure Exploit
2021-07-23 00:00:00
openvas
openvas
Elastic Elasticsearch Memory Disclosure Vulnerability (ESA-2021-16)
2021-07-22 00:00:00
cvelist
cvelist
CVE-2021-22145
2021-07-21 11:20:52
cve
cve
CVE-2021-22145
2021-07-21 15:15:14
packetstorm
packetstorm
ElasticSearch 7.13.3 Memory Disclosure
2021-07-23 00:00:00
nvd
nvd
CVE-2021-22145
2021-07-21 15:15:14
nuclei
nuclei
Elasticsearch 7.10.0-7.13.3 - Information Disclosure
2021-09-02 16:37:29
github
github
ibm
ibm
Security Bulletin: Operations Dashboard is vulnerable to Elasticsearch Go vulnerabilities (CVE-2021-22144 & CVE-2021-22145)
2021-10-14 13:15:16
exploitdb
exploitdb
ElasticSearch 7.13.3 - Memory disclosure
2021-07-23 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-09-08 18:03:17
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00