CVE-2019-13415
N/A
N/A
Summary
Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| floragunn | Search Guard | before 24.3 | affected |
Weaknesses
- CWE-280: CWE-280: Improper Handling of Insufficient Permissions or Privileges
ADP Enrichment
CVE Program Container
Additional References
- https://search-guard.com/cve-advisory/
- https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3
References
- https://search-guard.com/cve-advisory/
- https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.