PT-2019-13330 · Floragunn · Search Guard
CVE-2019-13418
·
Publicado
2019-08-12
·
Atualizado
2023-03-02
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Search Guard versions prior to 24.0
Description
The issue concerns the improper anonymization of string array values in documents. This affects the confidentiality of the data, as sensitive information may not be properly protected.
Recommendations
For versions prior to 24.0, update to version 24.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive documents until the update can be applied.
Correção
Improper Validation of Array Index
Missing Encryption of Sensitive Data
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Search Guard