CVE-2019-13417

2019-08-1220:51:23

CWE-863

floragunn

www.cve.org

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fields which are not allowed for the user when field level security (FLS) is activated.

CNA Affected

[
  {
    "product": "Search Guard",
    "vendor": "floragunn",
    "versions": [
      {
        "lessThan": "24.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]