CVE-2019-13421

Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database...

CVE-2019-13422

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login...

CVE-2019-13422

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login...

Default credentials

Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database...

Authentication flaw

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a Kibana is configured to use Single-Sign-On as...

Code injection

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login...

CVE-2019-13422

Affected software: floragunn Search Guard Kibana Plugin; versions before 5.6.8-7 and before 6.x.y-12 have an input-validation error that can redirect a logged-in Kibana user to a potentially malicious site. Root cause per CNVD: input validation error. Impact: user redirection upon Kibana login. M...

CVE-2019-13422

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login...

CVE-2019-13422

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login...

CVE-2019-13423

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a Kibana is configured to use Single-Sign-On as...

CVE-2019-13423

CVE-2019-13423 describes an impersonation vulnerability in floragunn Search Guard Kibana Plugin, affecting versions before 5.6.8-7 and before 6.x.y-12. The issue arises when an authenticated Kibana user presents incorrect credentials under a specific configuration: Kibana uses SSO (Kerberos, JWT,...

CVE-2019-13423

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a Kibana is configured to use Single-Sign-On as...

CVE-2019-13421

The CVE-2019-13421 affects floragunn Search Guard (Elasticsearch/ELK plug‑ins). Versions before 23.1 expose an information-disclosure flaw whereby an administrative user can retrieve bcrypt password hashes of other users from the internal user database. The issue is confirmed across multiple sour...

PT-2019-13333

Name of the Vulnerable Software and Affected Versions Search Guard versions prior to 23.1 Description The issue allows an administrative user to retrieve bcrypt password hashes of other users configured in the internal user database. Recommendations For versions prior to 23.1, update to version...

CVE-2019-13422: URL Redirection to Untrusted Site

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon Kibana login...

PT-2019-13335

Name of the Vulnerable Software and Affected Versions Search Guard Kibana Plugin versions before 5.6.8-7 Search Guard Kibana Plugin versions before 6.x.y-12 Description The issue allows an authenticated Kibana user to impersonate as the kibanaserver user when providing wrong credentials under...

CVE-2019-13421: Insufficiently Protected Credentials

Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database...

PT-2019-13334

Name of the Vulnerable Software and Affected Versions Search Guard Kibana Plugin versions before 5.6.8-7 Search Guard Kibana Plugin versions before 6.x.y-12 Description The issue allows an attacker to redirect the user to a potentially malicious site upon Kibana login. Recommendations For Search...

CVE-2019-13423: Improper Authentication

Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user when providing wrong credentials when all of the following conditions a-c are true: a Kibana is configured to use Single-Sign-On as...

The vulnerability of the network software SKS Keyserver and the GNU Privacy Guard (GnuPG) software for encrypting information and generating digital signatures arises from the lack of verification of host data in the certificates. This allows attackers to trigger a service failure.

The vulnerability of the network software SKS Keyserver and the information encryption and digital signatures generation programs of GNU Privacy Guard GnuPG is related to the lack of verification of host data in the certificates. Exploiting this vulnerability could allow a malicious actor to caus...