Vulnerabilities > CVE-2019-13420 - Information Exposure Through Discrepancy vulnerability in Search-Guard Search Guard

CVSS 5.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

high complexity

search-guard

CWE-203

NVD

Published: 2019-08-13

Updated: 2021-09-14

Summary

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.

Vulnerable Configurations

Part	Description	Count
Application	Search-Guard Search Guard Search Guard - Search Guard Search Guard 1 Search Guard Search Guard 4.6.0-1 Search Guard Search Guard 4.6.0-2 Search Guard Search Guard 5.0.2-1 Search Guard Search Guard 5.0.2-2 Search Guard Search Guard 5.1.1-1 Search Guard Search Guard 5.1.1-2 Search Guard Search Guard 5.1.2-1 Search Guard Search Guard 5.1.2-2 Search Guard Search Guard 5.2.0-1 Search Guard Search Guard 5.2.0-2 Search Guard Search Guard 5.2.0-3 Search Guard Search Guard 5.2.1-1 Search Guard Search Guard 5.2.1-2 Search Guard Search Guard 5.2.1-3 Search Guard Search Guard 5.2.2 Search Guard Search Guard 5.2.2-1 Search Guard Search Guard 5.2.2-2 Search Guard Search Guard 5.2.2-3 Search Guard Search Guard 5.3.0-1 Search Guard Search Guard 5.3.0-2 Search Guard Search Guard 5.3.0-3 Search Guard Search Guard 5.3.1-2 Search Guard Search Guard 5.3.1-3 Search Guard Search Guard 5.3.2-2 Search Guard Search Guard 5.3.2-3 Search Guard Search Guard 5.3.3-3 Search Guard Search Guard 5.4.0 Search Guard Search Guard 5.4.0-3 Search Guard Search Guard 5.4.0-4 Search Guard Search Guard 5.4.1-3 Search Guard Search Guard 5.4.1-4 Search Guard Search Guard 5.4.2-3 Search Guard Search Guard 5.4.2-4 Search Guard Search Guard 5.4.3 Search Guard Search Guard 5.4.3-3 Search Guard Search Guard 5.4.3-4 Search Guard Search Guard 5.5.0-3 Search Guard Search Guard 5.5.0-4 Search Guard Search Guard 5.5.1-3 Search Guard Search Guard 5.5.1-4 Search Guard Search Guard 5.5.2-4 Search Guard Search Guard 5.5.3-4 Search Guard Search Guard 5.6.0-4 Search Guard Search Guard 5.6.0-5 Search Guard Search Guard 5.6.2-4 Search Guard Search Guard 5.6.2-5 Search Guard Search Guard 5.6.3-4 Search Guard Search Guard 5.6.3-5 Search Guard Search Guard 5.6.4-5 Search Guard Search Guard 5.6.5-5 Search Guard Search Guard 5.6.6-5 Search Guard Search Guard 5.6.7-6 Search Guard Search Guard 5.6.8-6 Search Guard Search Guard 5.6.8-7 Search Guard Search Guard 6.1.0-8 Search Guard Search Guard 6.1.0-10 Search Guard Search Guard 6.1.1-9 Search Guard Search Guard 6.1.1-10 Search Guard Search Guard 6.1.1-12 Search Guard Search Guard 6.1.2-9 Search Guard Search Guard 6.1.2-10 Search Guard Search Guard 6.1.2-12 Search Guard Search Guard 6.1.3-9 Search Guard Search Guard 6.1.3-10 Search Guard Search Guard 6.1.3-12 Search Guard Search Guard 6.1.4-12 Search Guard Search Guard 6.2.1-10 Search Guard Search Guard 6.2.1-12 Search Guard Search Guard 6.2.1-14 Search Guard Search Guard 6.2.1-15 Search Guard Search Guard 6.2.2-10 Search Guard Search Guard 6.2.2-12 Search Guard Search Guard 6.2.2-14 Search Guard Search Guard 6.2.2-15 Search Guard Search Guard 6.2.3-12 Search Guard Search Guard 6.2.3-14 Search Guard Search Guard 6.2.3-15 Search Guard Search Guard 6.2.4-14 Search Guard Search Guard 6.2.4-15 Search Guard Search Guard 6.3.0-14 Search Guard Search Guard 6.3.0-16 Search Guard Search Guard 6.3.1-14 Search Guard Search Guard 6.3.1-15 Search Guard Search Guard 6.3.1-16 Search Guard Search Guard 6.3.2-14 Search Guard Search Guard 6.3.2-15 Search Guard Search Guard 6.3.2-16 Search Guard Search Guard 6.4.0-15 Search Guard Search Guard 6.4.0-16 Search Guard Search Guard 6.4.1-16 Search Guard Search Guard 6.4.2-16 Search Guard Search Guard 6.4.3-16 Search Guard Search Guard 6.5.1-16 Search Guard Search Guard 6.5.3-16	96

Common Weakness Enumeration (CWE)

CWE-203 - Information Exposure Through Discrepancy

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References