Back to CVE Browser

CVE-2019-13415

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.0160%

EPSS Percentile30.71th

PublishedAug 13, 2019

Last ModifiedNov 21, 2024

Vulnerability Description

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.

Affected Platforms (CPE)

📦

Search Guard

Search Guard

< 24.3

References & Advisories

🔗 https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3

🔗 https://search-guard.com/cve-advisory/

🔗 https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3

🔗 https://search-guard.com/cve-advisory/

Related Vulnerabilities

CVE-2019-134238.8

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impers...

CVE-2017-108367.8

Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse D...

CVE-2019-134187.5

Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized.

CVE-2019-134197.5

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.