CVE-2019-13418

HIGH

Search-guard Search Guard < 24.0 - Missing Encryption

Title source: rule
STIX 2.1

Description

Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized.

References (2)

Scores

CVSS v3 7.5
EPSS 0.0015
EPSS Percentile 35.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-129 CWE-311
Status published
Products (1)
search-guard/search_guard < 24.0
Published Aug 12, 2019
Tracked Since Feb 18, 2026