Lucene search
Veracode Vulnerability DatabaseVERACODE:30480HistoryMay 17, 2021 - 7:46 a.m.
Information Disclosure
2021-05-1707:46:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
38.9%
elasticsearch is vulnerable to information disclosure. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries when Document or Field Level Security is used, resulting in the search disclosing the existence of documents a user should not be able to view.
Related
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
2022-05-24 19:02:19
BIT-elasticsearch-2021-22137
2024-03-06 10:53:35
CVE-2021-22137
2021-05-13 18:15:09
nvd
nvd
CVE-2021-22137
2021-05-13 18:15:09
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
2022-05-24 19:02:19
cve
cve
CVE-2021-22137
2021-05-13 18:15:09
redhatcve
redhatcve
CVE-2021-22137
2021-03-25 14:58:19
cvelist
cvelist
CVE-2021-22137
2021-05-13 17:35:18
prion
prion
Design/Logic Flaw
2021-05-13 18:15:00
ubuntucve
ubuntucve
CVE-2021-22137
2021-05-13 00:00:00
ibm
ibm
openvas
openvas
Elastic Elasticsearch Multiple Vulnerabilities (ESA-2021-06, ESA-2021-08)
2021-05-14 00:00:00
redhat
redhat