Lucene search

K
redhatcveRedhat.comRH:CVE-2019-7619
HistoryMar 18, 2020 - 5:12 a.m.

CVE-2019-7619

2020-03-1805:12:08
redhat.com
access.redhat.com
22

0.002 Low

EPSS

Percentile

52.2%

Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.

0.002 Low

EPSS

Percentile

52.2%