CVE-2019-13421

Mô tả

Tham khảo

• docs.search-guard.com/6.x-23/changelog-searchguard-6-x-23_1 · Release Notes
• search-guard.com/cve-advisory · Vendor Advisory
• syss.de/fileadmin/dokumente/Publikationen/Advisories/SySS-2018-025.txt · Exploit

Lỗ hổng khác của search guard

• CVE-2019-13423CAO 8.8Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as k…
• CVE-2019-13422TRUNG BÌNH 6.1Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially …
• CVE-2019-13416TRUNG BÌNH 6.5Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on the…
• CVE-2019-13415TRUNG BÌNH 6.5Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data…
• CVE-2019-13420TRUNG BÌNH 5.9Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.