GHSA-45h5-r968-5xr7
Suggest an improvement- Source
- https://github.com/advisories/GHSA-45h5-r968-5xr7
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-45h5-r968-5xr7/GHSA-45h5-r968-5xr7.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-45h5-r968-5xr7
- Aliases
- Published
- 2021-09-20T20:29:40Z
- Modified
- 2024-02-17T05:34:49.410830Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- Exposure of sensitive information in Elasticsearch
- Details
-
A flaw was discovered in Elasticsearch where document and field level security was not applied to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.
- Database specific
{ "nvd_published_at": "2021-09-15T12:15:00Z", "cwe_ids": [ "CWE-732", "CWE-862" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-09-16T17:10:33Z" }- References
Affected packages
Maven / org.elasticsearch:elasticsearch
Package
- Name
- org.elasticsearch:elasticsearch
- View open source insights on deps.dev
- Purl
- pkg:maven/org.elasticsearch/elasticsearch