CVE-2019-13415CWE-280

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not…

published August 13, 2019

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00987 · 62.1th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2019-08-13T18:59Z
EPSS history
Timeline
  • 13 AUG 18:59Z
    Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not…
    cvelistv5