CVE-2019-13421CWE-522

Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal…

published August 23, 2019

CVSS
—
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01126 · 66.0th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2019-08-23T13:26Z
EPSS history
Timeline
  • 23 AUG 13:26Z
    Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal…
    cvelistv5