All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While in the default setting the anonymous user has no permissions and is unable to successfully query any Elasticsearch APIs, an attacker could leverage the anonymous user to gain insight into certain details of a deployed cluster.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NElastic Elasticsearch
APPElastic7.13.3
Related vulnerabilities
Elasticsearch: ucieczka z sandboksa Groovy i zdalne wykonanie poleceń
RCE w Elasticsearch przez protokół transportowy (przed wersją 1.6.1)
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers...
Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote...
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a mo...