CVE-2018-20698

Description

References

• docs.search-guard.com/latest/changelog-kibana-6.x-16 · Patch
• floragunncom/search-guard-kibana-plugin#140 · Third Party Advisory

Weitere Schwachstellen in search guard

• CVE-2019-13423HOCH 8.8Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as k…
• CVE-2019-13422MITTEL 6.1Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially …
• CVE-2019-13421MITTEL 4.9Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configu…
• CVE-2019-13416MITTEL 6.5Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the…
• CVE-2019-13415MITTEL 6.5Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data…