Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21774
HistoryOct 24, 2019 - 4:37 a.m.

Information Disclosure

2019-10-2404:37:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
513

0.002 Low

EPSS

Percentile

52.2%

A username disclosure flaw was found in Elasticsearch’s API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.

CPENameOperatorVersion
serverle7.3.2
serverle6.8.3
serverle7.3.2
serverle6.8.3

0.002 Low

EPSS

Percentile

52.2%