Security Flaw in Elasticsearch by Elastic

CVE-2021-22147

What is CVE-2021-22147?

A security issue in Elasticsearch prior to version 7.14.0 allows authenticated users to bypass document and field level security on searchable snapshots. This oversight can grant users unauthorized access to sensitive information, posing significant risks to data integrity and confidentiality. Organizations using affected versions should apply the necessary updates to secure their systems against potential exploitation.

References