Beveiligingsadvies

CVE-2019-13417

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-08-12 20:51:23
Laatst bijgewerkt 2024-08-04 23:49:24
Toegewezen door floragunn
CVSS-score geen score
Status PUBLISHED

Beschrijving

Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fields which are not allowed for the user when field level security (FLS) is activated.