CVE-2019-13416
N/A
N/A
Summary
Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote cluster(s).
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| floragunn | Search Guard | before 24.3 | affected |
Weaknesses
- CWE-285: CWE-285: Improper Authorization
ADP Enrichment
CVE Program Container
Additional References
- https://search-guard.com/cve-advisory/
- https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3
References
- https://search-guard.com/cve-advisory/
- https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.