CVE-2019-13420

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database...

CVE-2019-13420

CVE-2019-13420 affects floragunn Search Guard (Elasticsearch/ELK plugin) prior to version 21.0. The vulnerability is a timing side-channel in the internal user database, which could leak information and impact confidentiality. The detail provided specifies the root cause as a timing discrepancy w...