Elastic Elasticsearch Memory Disclosure Vulnerability (ESA-2021-16)

Elasticsearch is prone to a memory disclosure vulnerability.

A memory disclosure vulnerability was identified in Elasticsearch's error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.

Elasticsearch version 7.10.0 through 7.13.3.

Checks if a vulnerable version is present on the target host.

Update to version 7.13.4 or later.