CVEブラウザに戻る

CVE-2019-13415

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.0160%

EPSS Percentile30.71th

Published2019年8月13日

Last Modified2024年11月21日

Vulnerability Description

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.

Affected Platforms (CPE)

📦

Search Guard

Search Guard

< 24.3

References & Advisories

🔗 https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3

🔗 https://search-guard.com/cve-advisory/

🔗 https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3

🔗 https://search-guard.com/cve-advisory/

関連する脆弱性情報

CVE-2019-134238.8

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impers...

CVE-2017-108367.8

Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse D...

CVE-2019-134187.5

Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized.

CVE-2019-134197.5

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.