Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2021-22147 — MEDIUM severity vulnerability | Release Alert

CVE-2021-22147

6.5

MEDIUMCVSS v3

Published

September 15, 2021

CVSS v2

4 MEDIUM

Affected

11 projects

Assigned by

[email protected]

Severity scale

010

Description

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.

elastic/elasticsearch

GitHubFree and Open Source, Distributed, RESTful Search Engine

>= 7.11.0, < 7.14.0NVD

elasticsearch

NPMThe official low-level Elasticsearch client for Node.js and the browser.

>= 7.11.0, < 7.14.0NVD

ElasticSearch

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Elasticsearch is a flexible and powerful open source, distributed, real-time search and analytics engine.

>= 7.11.0, < 7.14.0NVD

Elasticsearch

Chocolatey## The heart of the free and open Elastic Stack Elasticsearch is a distributed, RESTful search and analytics engine capable of addressing a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data for lightning fast search, fine‑tuned relevancy, and powerful analytics that scale with ease. **Please Note**: This is an automatically updated package. If you find it is out of date by more than a day or two, please contact the maintainer(s) and let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.

>= 7.11.0, < 7.14.0NVD