CVE-2021-22145 - log back

CVE-2021-22145 edited at 20 Jul 2021 15:34:31
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Information disclosure
Description
+ A memory disclosure vulnerability was identified in Elasticsearch’s error reporting in versions 7.10.0 up to 7.13.3. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.
References
+ https://discuss.elastic.co/t/elasticsearch-7-13-4-security-update/279177
CVE-2021-22145 created at 20 Jul 2021 15:33:54
Severity
+ Unknown
Remote
+ Unknown
Type
+ Unknown
Description
References
Notes