返回 CVE 瀏覽器

CVE-2019-13415

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.0160%

EPSS Percentile30.71th

Published2019年8月13日

Last Modified2024年11月21日

Vulnerability Description

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.

Affected Platforms (CPE)

📦

Search Guard

Search Guard

< 24.3

References & Advisories

🔗 https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3

🔗 https://search-guard.com/cve-advisory/

🔗 https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3

🔗 https://search-guard.com/cve-advisory/

相關漏洞威脅

CVE-2019-134238.8

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impers...

CVE-2017-108367.8

Untrusted search path vulnerability in Optimal Guard 1.1.21 and earlier allows an attacker to gain privileges via a Trojan horse D...

CVE-2019-134187.5

Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized.

CVE-2019-134197.5

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.