← Back to CVEs

CVE-2021-22146

HIGH

7.5

Description

All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While in the default setting the anonymous user has no permissions and is unable to successfully query any Elasticsearch APIs, an attacker could leverage the anonymous user to gain insight into certain details of a deployed cluster.

CVE Details

CVSS v3.1 Score7.5

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published7/21/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

elastic:elasticsearch

References

http://packetstormsecurity.com/files/163655/Elasticsearch-ECE-7.13.3-Database-Disclosure.html(security@elastic.co)

https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180(security@elastic.co)

https://security.netapp.com/advisory/ntap-20210819-0005/(security@elastic.co)

http://packetstormsecurity.com/files/163655/Elasticsearch-ECE-7.13.3-Database-Disclosure.html(af854a3a-2127-422b-91ae-364da2661108)

https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20210819-0005/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.