CVE-2019-13415

Medium

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to…

floragunn·CWE-280·Published 2019-08-13

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

172 chars

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.

NVDen

172 chars

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.

Search Guard versiones anteriores a la 24.3 tenían un problema cuando Cross Cluster Search (CCS) estaba habilitado, los usuarios autenticados pueden obtener acceso de lectura a los datos que no están autorizados a ver.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:P/I:N/A:N
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N