VDB
CVE-2021-22147
CVE-2021-22147
PUBLISHED
CVSS 6.5 MEDIUM
Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.
EPSS 1.04% · 63.4th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
1.04%
63.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | elasticsearch | 7.11.0, 7.11.0 |
| Bitnami | elasticsearch | 7.11.0 |
Timeline
- Aug 4, 2021 CVE Published
- Sep 16, 2021 EPSS Score
- Oct 11, 2021 CVE Updated
- Nov 13, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 10, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 7, 2022 EPSS Score
- Sep 1, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 26, 2022 EPSS Score