CVEvulnerability
CVE-2019-13415
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-08-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-280
Description
Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.
Affected configurations
• search-guard search guard (< 24.3)
Related
Weakness · CWE (1)
- CWE-280 Improper Handling of Insufficient Permissions or Privileges weakness
References
- https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3 Release Notes, Vendor Advisory
- https://search-guard.com/cve-advisory/ Vendor Advisory
- https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3 Release Notes, Vendor Advisory
- https://search-guard.com/cve-advisory/ Vendor Advisory