PT-2019-13330 · Floragunn · Search Guard

CVE-2019-13418

·

Publicado

2019-08-12

·

Atualizado

2023-03-02

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Search Guard versions prior to 24.0
Description The issue concerns the improper anonymization of string array values in documents. This affects the confidentiality of the data, as sensitive information may not be properly protected.
Recommendations For versions prior to 24.0, update to version 24.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive documents until the update can be applied.

Correção

Improper Validation of Array Index

Missing Encryption of Sensitive Data

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2019-13418

Produtos afetados

Search Guard