CVE-2021-22147 - AskarLabs CVE Database

CVE-2021-22147

Vendor Elastic

Product Elasticsearch

Weakness CWE-732

Published September 15, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.

Key dates

02Disclosure timeline

September 15, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-22147 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/732.html

Related vulnerabilities

04Related CVE

CVE-2026-42937 iControl REST and tmsh vulnerability CVE-2026-26095 Incorrect Permission Assignment for Critical Resource in Owl opds CVE-2025-10541 Local Privilege Escalation via Insecure Update Mechanism in iMonitor EAM CVE-2024-29869 Apache Hive: Credentials file created with non restrictive permissions CVE-2017-8450