CVE-2021-22148
CVE-2021-22148
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
15 set 2021Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user gaining access to unauthorized engines.
Produtos afetados
Elastic · Elastic Enterprise SearchQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →