Lucene search
PRIOn knowledge basePRION:CVE-2019-7619HistoryOct 30, 2019 - 2:15 p.m.
Design/Logic Flaw
2019-10-3014:15:00
PRIOn knowledge base
www.prio-n.com
1
Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elasticsearch | ge | 6.7.0 | |
| elasticsearch | le | 6.8.3 | |
| elasticsearch | ge | 7.0.0 | |
| elasticsearch | le | 7.3.2 |
Related
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
2022-05-24 17:00:08
CVE-2019-7619
2019-10-30 14:15:11
cve
cve
CVE-2019-7619
2019-10-30 14:15:11
veracode
veracode
Information Disclosure
2019-10-24 04:37:41
nvd
nvd
CVE-2019-7619
2019-10-30 14:15:11
symantec
symantec
Elasticsearch CVE-2019-7619 Information Disclosure Vulnerability
2019-10-24 00:00:00
redhatcve
redhatcve
CVE-2019-7619
2020-03-18 05:12:08
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
2022-05-24 17:00:08
ubuntucve
ubuntucve
CVE-2019-7619
2019-10-30 00:00:00
openvas
openvas
Elastic Elasticsearch Username Disclosure Vulnerability (ESA-2019-13)
2021-01-25 00:00:00
cvelist
cvelist
CVE-2019-7619
2019-10-30 13:37:42
