low
AWS ElasticSearch Index Name Leakage
Published Tue, May 15th, 2018
Platforms
Summary
Even for the AWS-managed ElasticSearch clusters that had not been made public, their index names could be learned.
Affected Services
AWS ElasticSearch
Remediation
None required
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/ramimac
Entry Status
Finalized
Disclosure Date
Tue, Jan 30th, 2018
Exploitability Period
-
Known ITW Exploitation
-
Detection Methods
None
Piercing Index Rating
-
Discovered by
Scott Piper, Duo Security
