Summary
Even for the AWS-managed ElasticSearch clusters that had not been made public,
their index names could be learned.
Affected Services
AWS ElasticSearch
Remediation
None required
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/ramimac
Entry Status
Finalized
Disclosure Date
Tue, Jan 30th, 2018
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Scott Piper, Duo Security
