UBUNTU-CVE-2021-22147

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2021-22147

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-22147.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2021-22147

Related

CVE-2021-22147

Published

2021-09-15T12:15:00Z

Modified

2024-10-15T14:08:01Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.

References

Affected packages

Ubuntu:Pro:16.04:LTS / elasticsearch

Package

Name: elasticsearch
Purl: pkg:deb/ubuntu/elasticsearch?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.6.2+dfsg-1

1.7.3+dfsg-1

1.7.3+dfsg-2

1.7.3+dfsg-3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}