CVE-2019-13415

CVE-2019-13415 affects floragunn Search Guard (pre-24.3) where Cross Cluster Search (CCS) enabled allows authenticated users to read data they are not authorized to see. Root cause is an authorization issue in versions before 24.3; impact is unauthorized data exposure when CCS is used. Connected ...

CVE-2019-13415

Search Guard versions before 24.3 had an issue when Cross Cluster Search CCS was enabled, authenticated users can gain read access to data they are not authorized to see...

CVE-2019-13416

Search Guard versions before 24.3 had an issue when Cross Cluster Search CCS was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote clusters...

CVE-2019-13416

CVE-2019-13416 affects floragunn Search Guard (Search Guard) prior to version 24.3. When Cross Cluster Search (CCS) is enabled, authenticated users can be authorized on the local cluster regardless of their roles on remote clusters, effectively bypassing remote-role checks. Affected component: Se...

CVE-2017-18488

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

CVE-2017-18488

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

Cross site scripting

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

CVE-2017-18488

The Backup Guard plugin before 1.1.47 for WordPress has multiple XSS issues...

CVE-2017-18488

CVE-2017-18488 affects the Backup Guard WordPress plugin, with multiple XSS issues reported in versions prior to 1.1.47. The connected documents confirm the existence of XSS in this plugin, but do not provide technical details about the exact vulnerable component, root cause, impact specifics, ex...

CVE-2019-13420

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

CVE-2019-13419

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

CVE-2019-13420

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

CVE-2019-13419

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

Code injection

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

Code injection

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

CVE-2019-13419

Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...

CVE-2019-13419

The CVE-2019-13419 issue affects floragunn Search Guard (Search Guard) prior to version 23.1, where aggregations could leak cleartext values of anonymised fields. The vulnerability is documented across multiple sources (NVD, Red Hat, CNVD) with a common description: before 23.1, an information di...

CVE-2019-13420

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

CVE-2019-13420

CVE-2019-13420 affects floragunn Search Guard (Elasticsearch/ELK plugin) prior to version 21.0. The vulnerability is a timing side-channel in the internal user database, which could leak information and impact confidentiality. The detail provided specifies the root cause as a timing discrepancy w...

CVE-2019-13416: Improper Authorization

Search Guard versions before 24.3 had an issue when Cross Cluster Search CCS was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote clusters...