CVE-2019-13417CWE-863

Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fields which are not allowed for the user…

published August 12, 2019

CVSS
—
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fields which are not allowed for the user when field level security (FLS) is activated.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01104 · 65.5th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2019-08-12T20:51Z
EPSS history
Timeline
  • 12 AUG 20:51Z
    Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fields which are not allowed for the user…
    cvelistv5