Lucene search
GoogleOSV:CVE-2019-7619HistoryOct 30, 2019 - 2:15 p.m.
CVE-2019-7619
2019-10-3014:15:11
Google
osv.dev
4
Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elasticsearch | eq | 6.8.2 | |
| elasticsearch | eq | 6.8.0 | |
| elasticsearch | eq | 6.7.0 | |
| elasticsearch | eq | 6.8.3 | |
| elasticsearch | eq | 6.7.1 | |
| elasticsearch | eq | 6.7.2 | |
| elasticsearch | eq | 6.8.1 |
Related
prion
prion
Design/Logic Flaw
2019-10-30 14:15:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
2022-05-24 17:00:08
cve
cve
CVE-2019-7619
2019-10-30 14:15:11
veracode
veracode
Information Disclosure
2019-10-24 04:37:41
nvd
nvd
CVE-2019-7619
2019-10-30 14:15:11
symantec
symantec
Elasticsearch CVE-2019-7619 Information Disclosure Vulnerability
2019-10-24 00:00:00
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
2022-05-24 17:00:08
redhatcve
redhatcve
CVE-2019-7619
2020-03-18 05:12:08
openvas
openvas
Elastic Elasticsearch Username Disclosure Vulnerability (ESA-2019-13)
2021-01-25 00:00:00
cvelist
cvelist
CVE-2019-7619
2019-10-30 13:37:42
ubuntucve
ubuntucve
CVE-2019-7619
2019-10-30 00:00:00
