CVEvulnerability
CVE-2019-13416
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-08-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-285
Description
Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote cluster(s).
Affected configurations
• search-guard search guard (< 24.3)
Related
Weakness · CWE (1)
- CWE-285 Improper Authorization weakness
References
- https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3 Release Notes, Vendor Advisory
- https://search-guard.com/cve-advisory/ Vendor Advisory
- https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3 Release Notes, Vendor Advisory
- https://search-guard.com/cve-advisory/ Vendor Advisory