EDB-50152
PoCElasticsearch ECE 7.13.3 - Anonymous Database Dump
view exploit source exploit_dbtype webappsauthor Joan Martinezpublished 2021-07-26catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-22146US | high7.5 | Exploit | ||
All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While in the default setting the anonymous user has no perm… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan