CVE-2019-13417

State: Published
Severity: Not scored
Published: Aug 12, 2019
Updated: Aug 4, 2024
Reserved: Jul 8, 2019

Description

Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fields which are not allowed for the user when field level security (FLS) is activated.

Scores

The record has no CVSS score.

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
Search Guardfloragunn	before 24.0Affected

References

https://search-guard.com/cve-advisory/
https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_0

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.