CVE-2021-22147
CVE-2021-22147
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.
CVSS 6.5 · Medium · EPSS 1.0%
- Published
- Updated
Stack: system
Affected products and versions
elasticsearch
- Versions
- versions 7.11.0 to 7.13.4: Affected
No fix published
elasticsearch Ubuntu:16.04:LTS
- Versions
- 1.6.2+dfsg-1
- 1.7.3+dfsg-1
- 1.7.3+dfsg-2
- 1.7.3+dfsg-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published