CVE-2021-22137
published 2021-05-13CVE-2021-22137: In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not…
PriorityP427medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
1.10%
61.6th percentile
In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| elastic | elasticsearch | < 6.8.15 | 6.8.15 |
| elastic | elasticsearch | — | — |
| elastic | elasticsearch | >= 7.11.0 < 7.11.2 | 7.11.2 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv5.3MEDIUM
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
osv·2022-05-24
CVE-2021-22137 [MEDIUM] Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.
GHSA
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
ghsa·2022-05-24
CVE-2021-22137 [MEDIUM] CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.
OSV
CVE-2021-22137: In Elasticsearch versions before 7
osv·2021-05-13·CVSS 5.3
CVE-2021-22137 [MEDIUM] CVE-2021-22137: In Elasticsearch versions before 7
In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.
Red Hat
elasticsearch: Document disclosure flaw when Document or Field Level Security is used
vendor_redhat·2021-03-23·CVSS 5.3
CVE-2021-22137 [MEDIUM] CWE-200 elasticsearch: Document disclosure flaw when Document or Field Level Security is used
elasticsearch: Document disclosure flaw when Document or Field Level Security is used
In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain cross-cluster search queries. This could result in the search disclosing the existence of documents the attacker should not be able to view. This could result in an attacker gaining additional insight into potentially sensitive indices.
Statement: In Elasticsearch, Document and Field Level Security is an enterprise only feature [1]. Hence the open source version is unaffected by this vulnerability.
[1] https://www.elastic.co/subscriptions
Package: openshift-logging/elasticsearch6-rhel8 (
No detection rules found.
No public exploits indexed.
2021-05-13
Published