PT-2021-3748 · Elastic · Cloud Enterprise

Published 2021-07-21 · Updated 2024-03-06 · CVE-2021-22146

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Elastic Cloud Enterprise versions (affected versions not specified)

Description The issue is related to the Elasticsearch “anonymous” user being enabled by default in deployed clusters. Although this user has no permissions and cannot query any Elasticsearch APIs by default, an attacker could potentially use it to gain insight into certain details of a deployed cluster. The vulnerability is associated with security configuration errors in the Elastic Cloud Enterprise platform, which could allow a remote attacker to access protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

BDU:2021-04001

BIT-ELASTICSEARCH-2021-22146

CVE-2021-22146

Affected Products

Cloud Enterprise

References · 13

• 🔥 https://github.com/magichk/cve-2021-22146 · Exploit
• 🔥 https://exploit-db.com/exploits/50152 · Exploit
• 🔥 http://packetstormsecurity.com/files/163655/Elasticsearch-ECE-7.13.3-Database-Disclosure.html · Exploit
• https://bdu.fstec.ru/vul/2021-04001 · Security Note
• https://discuss.elastic.co/t/elastic-cloud-enterprise-security-update/279180 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22146 · Security Note
• https://osv.dev/vulnerability/BIT-elasticsearch-2021-22146 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22146 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/3937 · Telegram Post
• https://packetstormsecurity.com/files/163655/Elasticsearch-ECE-7.13.3-Database-Disclosure.html · Note
• https://t.me/cvenotify/18141 · Telegram Post
• https://t.me/cvenotify/19705 · Telegram Post
• https://security.netapp.com/advisory/ntap-20210819-0005 · Note