critical9.8
CVE-2021-44833
The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file.
Impact
The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Aws Opensearch | Version 1.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/opensearch-project/opensearch-cli/blob/275085730f791daccaac81c566a25f541656d9f9/commands/root.go#L43
- https://github.com/opensearch-project/opensearch-cli/commit/69dc712d0d0d05dc2bc2bd0d733c73e3641b633a
- https://github.com/opensearch-project/opensearch-cli/blob/275085730f791daccaac81c566a25f541656d9f9/commands/root.go#L43
- https://github.com/opensearch-project/opensearch-cli/commit/69dc712d0d0d05dc2bc2bd0d733c73e3641b633a