Lucene search
GoogleOSV:GHSA-HXP8-R9G3-GRFRHistoryMay 24, 2022 - 5:00 p.m.
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
2022-05-2417:00:08
Google
osv.dev
14
elasticsearch
sensitive information
unauthorized actor
api key service
username disclosure
unauthenticated attacker
EPSS
0.002
Percentile
52.1%
Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.
Related
prion
prion
Design/Logic Flaw
2019-10-30 14:15:00
redhatcve
redhatcve
CVE-2019-7619
2020-03-18 05:12:08
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
2022-05-24 17:00:08
cve
cve
CVE-2019-7619
2019-10-30 14:15:11
symantec
symantec
Elasticsearch CVE-2019-7619 Information Disclosure Vulnerability
2019-10-24 00:00:00
veracode
veracode
Information Disclosure
2019-10-24 04:37:41
nvd
nvd
CVE-2019-7619
2019-10-30 14:15:11
osv
osv
CVE-2019-7619
2019-10-30 14:15:11
cvelist
cvelist
CVE-2019-7619
2019-10-30 13:37:42
ubuntucve
ubuntucve
CVE-2019-7619
2019-10-30 00:00:00
openvas
openvas
Elastic Elasticsearch Username Disclosure Vulnerability (ESA-2019-13)
2021-01-25 00:00:00
