VULNERABILITY INTELLIGENCE

CVE-2019-13417

CVSS score5.3 MEDIUM
EPSS probability1.10%
CISA KEVNot currently listed
Published2019-08-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fields which are not allowed for the user when field level security (FLS) is activated.

Weakness classification

  • security@search-guard.com: CWE-863
  • nvd@nist.gov: CWE-200

Primary references