CVE-2021-44833: Critical severity amazon web services vulnerability

Published Dec 12, 2021

Updated

The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file.

Affected Software

1 affected component

Amazon AWS OpenSearch=1.0.0

Remediation

Patch Available

https://github.com/opensearch-project/opensearch-cli/commit/69dc712d0d0d05dc2bc2bd0d733c73e3641b633a

Event History

Dec 12, 2021

CVE Published

via MITRE·05:32 AM

Data Sourced

via MITRE·05:32 AM

Description

Data Sourced

via NVD·06:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2021-44833?

CVE-2021-44833 is a vulnerability in the CLI 1.0.0 for Amazon AWS OpenSearch that causes weak permissions for the configuration file.

What is the severity of CVE-2021-44833?

CVE-2021-44833 has a severity rating of critical with a CVSS score of 9.8.

How does CVE-2021-44833 impact Amazon AWS OpenSearch CLI 1.0.0?

CVE-2021-44833 allows an attacker to exploit weak permissions on the configuration file.

Are there any fixes available for CVE-2021-44833?

Currently, there are no official fixes available for CVE-2021-44833. It's recommended to follow the Amazon AWS OpenSearch documentation for updates and security recommendations.

Is there any additional information available for CVE-2021-44833?

Yes, additional information about CVE-2021-44833 can be found in the references provided: [Link 1](https://github.com/opensearch-project/opensearch-cli/blob/275085730f791daccaac81c566a25f541656d9f9/commands/root.go#L43) and [Link 2](https://github.com/opensearch-project/opensearch-cli/commit/69dc712d0d0d05dc2bc2bd0d733c73e3641b633a).