CVE-2019-13416CWE-285

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the local cluster…

published August 13, 2019

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the local cluster ignoring their roles on the remote cluster(s).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00987 · 62.1th percentile
Weakness
CWE-285 · Improper Authorization
Published
2019-08-13T18:58Z
EPSS history
Timeline
  • 13 AUG 18:58Z
    Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the local cluster…
    cvelistv5