PT-2023-19306 · Opensearch+2 · Anomaly Detection Plugin+2

Cehenkle · Published 2023-02-03 · Updated 2025-04-03 · CVE-2023-23933

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenSearch versions prior to 1.3.8 OpenSearch versions prior to 2.6.0

Description There is an issue with the application of document and field level restrictions in the Anomaly Detection plugin, where users with the Anomaly Detector role can read aggregated numerical data of fields that are otherwise restricted to them. This issue only affects authenticated users who were previously granted read access to the indexes containing the restricted fields.

Recommendations For versions prior to 1.3.8, update to version 1.3.8 or later to resolve the issue. For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-04292

CVE-2023-23933

GHSA-47QW-JWPX-PP4C

Affected Products

Anomaly Detection Plugin

Opensearch

Red Os

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/23xxx/CVE-2023-23933.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-23933 · Security Note
• https://bdu.fstec.ru/vul/2025-04292 · Security Note
• https://osv.dev/vulnerability/CVE-2023-23933 · Vendor Advisory
• https://github.com/opensearch-project/anomaly-detection/security/advisories/GHSA-47qw-jwpx-pp4c · Note
• https://t.me/cibsecurity/57511 · Telegram Post
• https://redos.red-soft.ru/support/secure · Note