CyberSec.Space Logo
Back to CVE Browser

CVE-2019-13418

HIGH
7.5
CVSS Severity Score
EPSS Score0.1590%
EPSS Percentile0.82th
PublishedAug 12, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized.

Affected Platforms (CPE)

📦
Search Guard

Search Guard

< 24.0

References & Advisories

🔗 https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_0
🔗 https://search-guard.com/cve-advisory/
🔗 https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_0
🔗 https://search-guard.com/cve-advisory/

Related Vulnerabilities

CVE-2019-134238.8

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impers...

CVE-2017-108367.8

Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse D...

CVE-2019-134197.5

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.

CVE-2019-134156.5

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read acce...