VDB
CVE-2021-22147
CVE-2021-22147
PUBLISHED
Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.
EPSS 0.31% · 54.9th percentile
Risk Scores
EPSS Score
0.31%
54.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | elasticsearch | 7.11.0, 7.11.0 |
| Bitnami | elasticsearch | 7.11.0 |
Exploit Intelligence
- suppressions_cve.xml (github-poc)
- suppressions_cve.xml (github-poc)
- suppressions_cve.xml (github-poc)
- suppressions_cve.xml (github-poc)
- suppressions_cve.xml (github-poc)
- suppressions_cve.xml (github-poc)
- suppressions_cve.xml (github-poc)
Timeline
- Sep 15, 2021 CVE Published
- Sep 16, 2021 EPSS Score
- Nov 12, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 7, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 4, 2022 EPSS Score
- Jun 30, 2022 EPSS Score
- Oct 24, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 16, 2023 EPSS Score