The host is installed with Elasticsearch 7.x before 7.10.2 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to handle an issue in the async search API. Successful exploitation could allow attackers to know the existence of documents but not be able to view. This could result in an attacker with the ability to read the .tasks index to obtain sensitive request headers of other users in the cluster.