CVE-2019-13423

CVE-2019-13423 describes an impersonation vulnerability in floragunn Search Guard Kibana Plugin, affecting versions before 5.6.8-7 and before 6.x.y-12. The issue arises when an authenticated Kibana user presents incorrect credentials under a specific configuration: Kibana uses SSO (Kerberos, JWT,...