On August 12 the OpenSearch project published a security advisory for a vulnerability in the software’s security plugin. The vulnerability allows requests to access sensitive information when the customer has acted to restrict access that specific information. This issue has been fixed in OpenSearch 2.2.0. Users of 2.0.0 or 2.1.0 versions are encouraged to upgrade to version 2.2.0 to resolve the vulnerability.
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| OpenSearch 1.2.2 version still showing log4j Vulnerability findings | 13 | 1248 | January 10, 2022 | |
| OpenSearch 1.0.1 is now available! | 0 | 933 | September 1, 2021 | |
| Security Vulnerabilities | 0 | 813 | August 6, 2021 | |
| Security vulnerability in open search v 2.15 | 4 | 1440 | August 5, 2024 | |
| Do you want live notifications when people reply to your posts? Enable Notifications Facing issue with OpenSearch image vulnerabilities of OpenSearch Logstash | 1 | 376 | March 8, 2023 |