PT-2019-13332 · Floragunn · Search Guard

Publicado 2019-08-13 · Atualizado 2021-09-14 · CVE-2019-13420

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Search Guard versions prior to 21.0

Description The issue is related to a timing side channel problem that occurs when the internal user database is used.

Recommendations For versions prior to 21.0, update to version 21.0 or later to resolve the issue.

Correção

Side Channel Attack

Enumeração de Fraquezas

CWE-208

CWE-203

Identificadores relacionados

CVE-2019-13420

Produtos afetados

Search Guard

Referências · 4

• https://docs.search-guard.com/6.x-21/changelog-searchguard-6-x-21_0 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-13420 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-13420 · Nota de Segurança
• https://search-guard.com/cve-advisory · Aviso do Fabricante