CVE-2021-22146 PoC — Elasticsearch 安全漏洞

Source

https://github.com/magichk/cve-2021-22146

Associated Vulnerability

Title:Elasticsearch 安全漏洞 (CVE-2021-22146)
Description:All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While in the default setting the anonymous user has no permissions and is unable to successfully query any Elasticsearch APIs, an attacker could leverage the anonymous user to gain insight into certain details of a deployed cluster.

Readme

# cve-2021-22146

I found during a internal pentest a vulnerability on elastic ECE. Elasticdump is a PoC for CVE-2021-22146 to dump database from elastic ece from 7.10.0 to 7.13.3

https://www.exploit-db.com/exploits/50152

Collaborators: Mario Díaz Caldera.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →