Medium severity · published Feb 3, 2023
CVE-2023-23933
OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications
4.3
CVSS
0.5%
EPSS
No
On KEV
Description
OpenSearch Anomaly Detection identifies atypical data and receives automatic notifications. There is an issue with the application of document and field level restrictions in the Anomaly Detection plugin, where users with the Anomaly Detector role can read aggregated numerical data (e.g. averages, sums) of fields that are otherwise restricted to them. This issue only affects authenticated users who were previously granted read access to the indexes containing the restricted fields. This issue has been patched in versions 1.3.8 and 2.6.0. There are no known workarounds for this issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensearch · Amazon
1.0.0 before 1.3.8; 2.0.0 before 2.6.0 · source: NVD
Affected product
OP
Opensearch
Amazon
More from Opensearch
8.8
CVE-2023-23612
OpenSearch is an open source distributed and RESTful search engine
8.8
CVE-2022-31115
opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby
7.5
CVE-2025-9624
OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS
7.5
CVE-2022-35980
OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization
6.5
CVE-2023-23613
OpenSearch is an open source distributed and RESTful search engine