What is CVE-2021-44833?

CVE-2021-44833 is a vulnerability in the CLI 1.0.0 for Amazon AWS OpenSearch that causes weak permissions for the configuration file.

What is the severity of CVE-2021-44833?

CVE-2021-44833 has a severity rating of critical with a CVSS score of 9.8.

How does CVE-2021-44833 impact Amazon AWS OpenSearch CLI 1.0.0?

CVE-2021-44833 allows an attacker to exploit weak permissions on the configuration file.

Are there any fixes available for CVE-2021-44833?

Currently, there are no official fixes available for CVE-2021-44833. It's recommended to follow the Amazon AWS OpenSearch documentation for updates and security recommendations.

Is there any additional information available for CVE-2021-44833?

Yes, additional information about CVE-2021-44833 can be found in the references provided: [Link 1](https://github.com/opensearch-project/opensearch-cli/blob/275085730f791daccaac81c566a25f541656d9f9/commands/root.go#L43) and [Link 2](https://github.com/opensearch-project/opensearch-cli/commit/69dc712d0d0d05dc2bc2bd0d733c73e3641b633a).

Vulnerability/
CVE-2021-44833

critical

9.8

CWE

276

12/12/2021

21/11/2024

CVE-2021-44833

First published: Sun Dec 12 2021(Updated: )

The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
Amazon AWS OpenSearch	=1.0.0
	=1.0.0

Remedy

https://github.com/opensearch-project/opensearch-cli/commit/69dc712d0d0d05dc2bc2bd0d733c73e3641b633a

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2021-44833?
CVE-2021-44833 is a vulnerability in the CLI 1.0.0 for Amazon AWS OpenSearch that causes weak permissions for the configuration file.
What is the severity of CVE-2021-44833?
CVE-2021-44833 has a severity rating of critical with a CVSS score of 9.8.
How does CVE-2021-44833 impact Amazon AWS OpenSearch CLI 1.0.0?
CVE-2021-44833 allows an attacker to exploit weak permissions on the configuration file.
Are there any fixes available for CVE-2021-44833?
Currently, there are no official fixes available for CVE-2021-44833. It's recommended to follow the Amazon AWS OpenSearch documentation for updates and security recommendations.
Is there any additional information available for CVE-2021-44833?
Yes, additional information about CVE-2021-44833 can be found in the references provided: [Link 1](https://github.com/opensearch-project/opensearch-cli/blob/275085730f791daccaac81c566a25f541656d9f9/commands/root.go#L43) and [Link 2](https://github.com/opensearch-project/opensearch-cli/commit/69dc712d0d0d05dc2bc2bd0d733c73e3641b633a).

collector/nvd-index
agent/references
agent/type
collector/mitre-cve
source/MITRE
agent/severity
agent/remedy
agent/weakness
agent/description
agent/first-publish-date
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/last-modified-date
agent/author
agent/tags
agent/softwarecombine
agent/event
vendor/amazon
canonical/amazon aws opensearch
version/amazon aws opensearch/1.0.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.