Vulnerabilities > CVE-2019-13420 - Information Exposure Through Discrepancy vulnerability in Search-Guard Search Guard

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE

Summary

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.

Vulnerable Configurations

Part Description Count
Application
Search-Guard
96

Common Weakness Enumeration (CWE)