135 matches found
CVE-2019-13415
Search Guard versions before 24.3 had an issue when Cross Cluster Search CCS was enabled, authenticated users can gain read access to data they are not authorized to see...
Cross site scripting
Search Guard versions before 24.3 had an issue when Cross Cluster Search CCS was enabled, authenticated users can gain read access to data they are not authorized to see...
Cross site scripting
Search Guard versions before 24.3 had an issue when Cross Cluster Search CCS was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote clusters...
CVE-2019-13415
Search Guard versions before 24.3 had an issue when Cross Cluster Search CCS was enabled, authenticated users can gain read access to data they are not authorized to see...
CVE-2019-13415
CVE-2019-13415 affects floragunn Search Guard (pre-24.3) where Cross Cluster Search (CCS) enabled allows authenticated users to read data they are not authorized to see. Root cause is an authorization issue in versions before 24.3; impact is unauthorized data exposure when CCS is used. Connected ...
CVE-2019-13416
Search Guard versions before 24.3 had an issue when Cross Cluster Search CCS was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote clusters...
CVE-2019-13416
CVE-2019-13416 affects floragunn Search Guard (Search Guard) prior to version 24.3. When Cross Cluster Search (CCS) is enabled, authenticated users can be authorized on the local cluster regardless of their roles on remote clusters, effectively bypassing remote-role checks. Affected component: Se...
CVE-2019-13420
Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...
CVE-2019-13419
Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...
CVE-2019-13420
Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...
CVE-2019-13419
Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...
Code injection
Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...
Code injection
Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...
CVE-2019-13419
Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked...
CVE-2019-13419
The CVE-2019-13419 issue affects floragunn Search Guard (Search Guard) prior to version 23.1, where aggregations could leak cleartext values of anonymised fields. The vulnerability is documented across multiple sources (NVD, Red Hat, CNVD) with a common description: before 23.1, an information di...
CVE-2019-13420
CVE-2019-13420 affects floragunn Search Guard (Elasticsearch/ELK plugin) prior to version 21.0. The vulnerability is a timing side-channel in the internal user database, which could leak information and impact confidentiality. The detail provided specifies the root cause as a timing discrepancy w...
CVE-2019-13420
Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...
floragunn Search Guard Input Validation Error Vulnerability
floragunn Search Guard is a German floragunn company for Elasticsearch and ELK open source plug-ins , it mainly provides encryption , authentication , authorization management and log auditing and other functions . An input validation error vulnerability exists in versions prior to floragunn Sear...