Vulnerability · Published Jul 21, 2021 · Assigned by elastic
CVE-2021-22145
Medium 6.5
In plain English
A medium-severity information exposure in Elasticsearch from Elastic. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 76.2% (higher than 99.5% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Maven | org.elasticsearch.client:elasticsearch-rest-client | 7.13.4 | GHSA-q394-h7f5-7f44 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Elastic | Elasticsearch | 7.10.0 – through 7.13.3 |
Weakness: CWE-200
References
- https://www.oracle.com/security-alerts/cpuapr2022.html x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20210827-0006/ x_refsource_CONFIRM
- https://discuss.elastic.co/t/elasticsearch-7-13-4-security-update/279177 x_refsource_MISC
- http://packetstormsecurity.com/files/163648/ElasticSearch-7.13.3-Memory-Disclosure.html x_refsource_MISC
- https://gist.github.com/lucasdrufva/f9c5d7c9e26ee087b736d727953afd34 technical-description