Executive brief
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
Affected products
- Maven org.opensearch.plugin:opensearch-security
Junglewise Threat Intelligence
CVE-2022-35980: OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
CVE-2022-35980 · Severity: low · CVSS 3.1 · Published 2022-08-12
Technologies: org.opensearch.plugin:opensearch-security (Maven). Vendors: Maven.
Related threats
- OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths
- OpenSearch unauthorized data access on fields protected by field level security if field is a member of an object
- OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape