CVE-2019-13421

2019-08-2313:26:46

CWE-522

floragunn

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

JSON

Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database.

CNA Affected

[
  {
    "product": "Search Guard",
    "vendor": "floragunn",
    "versions": [
      {
        "lessThan": "23.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]