CVE:CVE-2023-25806
CNNVD:CNNVD-202303-150
OpenSearch Security是一个用于提供加密、身份验证和授权的 OpenSearch 插件。
OpenSearch Security存在安全漏洞，该漏洞源于身份验证不正确。
solution:Upgrade amazon opensearch to a higher version than 1.3.9,2.6.0,and avoid the version (,1.3.9),[2.0.0,2.6.0); Upgrade amazon opensearch_security to a higher version than 1.3.9,2.6.0,and avoid the version (,1.3.9),[2.0.0,2.6.0)