CVE-2022-41918
OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained access control rules (document-level security, field-level security and field masking) where they are not correctly applied to the indices that back data streams potentially leading to incorrect access authorization. OpenSearch 1.3.7 and 2.4.0 contain a fix for this issue. Users are advised to update. There are no known workarounds for this issue.
| Software | From | Fixed in |
|---|---|---|
| amazon / opensearch | - | 1.3.7 |
| amazon / opensearch | 2.0.0 | 2.4.0 |
org.opensearch.plugin / opensearch-security
|
- | 1.3.7 |
|
org.opensearch.plugin / opensearch-security
|
2.0.0 | 2.4.0 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime