1. CVE-Search
  2. CVE-2019-13415
ID CVE-2019-13415
Summary Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to data they are not authorized to see.
References
Vulnerable Configurations
  • cpe:2.3:a:search-guard:search_guard:-:*:*:*:*:*:*:*
    cpe:2.3:a:search-guard:search_guard:-:*:*:*:*:*:*:*
  • cpe:2.3:a:search-guard:search_guard:1:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:1:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:4.6.0-1:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:4.6.0-1:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:4.6.0-2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:4.6.0-2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.0.2-1:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.0.2-1:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.0.2-2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.0.2-2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.1.1-1:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.1.1-1:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.1.1-2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.1.1-2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.1.2-1:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.1.2-1:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.1.2-2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.1.2-2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.2.0-1:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.2.0-1:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.2.0-2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.2.0-2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.2.0-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.2.0-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.2.1-1:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.2.1-1:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.2.1-2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.2.1-2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.2.1-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.2.1-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.2.2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.2.2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.2.2-1:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.2.2-1:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.2.2-2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.2.2-2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.2.2-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.2.2-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.3.0-1:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.3.0-1:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.3.0-2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.3.0-2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.3.0-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.3.0-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.3.1-2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.3.1-2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.3.1-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.3.1-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.3.2-2:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.3.2-2:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.3.2-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.3.2-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.3.3-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.3.3-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.4.0:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.4.0:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.4.0-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.4.0-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.4.0-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.4.0-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.4.1-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.4.1-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.4.1-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.4.1-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.4.2-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.4.2-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.4.2-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.4.2-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.4.3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.4.3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.4.3-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.4.3-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.4.3-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.4.3-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.5.0-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.5.0-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.5.0-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.5.0-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.5.1-3:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.5.1-3:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.5.1-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.5.1-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.5.2-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.5.2-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.5.3-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.5.3-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.0-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.0-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.0-5:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.0-5:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.2-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.2-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.2-5:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.2-5:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.3-4:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.3-4:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.3-5:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.3-5:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.4-5:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.4-5:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.5-5:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.5-5:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.6-5:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.6-5:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.7-6:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.7-6:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.8-6:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.8-6:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:5.6.8-7:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:5.6.8-7:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.0-8:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.0-8:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.0-10:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.0-10:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.1-9:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.1-9:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.1-10:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.1-10:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.1-12:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.1-12:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.2-9:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.2-9:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.2-10:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.2-10:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.2-12:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.2-12:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.3-9:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.3-9:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.3-10:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.3-10:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.3-12:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.3-12:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.1.4-12:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.1.4-12:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.1-10:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.1-10:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.1-12:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.1-12:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.1-14:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.1-14:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.1-15:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.1-15:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.2-10:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.2-10:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.2-12:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.2-12:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.2-14:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.2-14:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.2-15:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.2-15:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.3-12:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.3-12:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.3-14:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.3-14:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.3-15:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.3-15:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.4-14:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.4-14:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.2.4-15:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.2.4-15:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.3.0-14:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.3.0-14:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.3.0-16:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.3.0-16:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.3.1-14:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.3.1-14:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.3.1-15:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.3.1-15:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.3.1-16:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.3.1-16:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.3.2-14:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.3.2-14:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.3.2-15:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.3.2-15:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.3.2-16:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.3.2-16:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.4.0-15:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.4.0-15:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.4.0-16:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.4.0-16:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.4.1-16:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.4.1-16:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.4.2-16:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.4.2-16:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.4.3-16:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.4.3-16:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.5.1-16:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.5.1-16:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:6.5.3-16:*:*:*:*:kibana:*:*
    cpe:2.3:a:search-guard:search_guard:6.5.3-16:*:*:*:*:kibana:*:*
  • cpe:2.3:a:search-guard:search_guard:21.0:*:*:*:*:*:*:*
    cpe:2.3:a:search-guard:search_guard:21.0:*:*:*:*:*:*:*
  • cpe:2.3:a:search-guard:search_guard:22.3:*:*:*:*:*:*:*
    cpe:2.3:a:search-guard:search_guard:22.3:*:*:*:*:*:*:*
  • cpe:2.3:a:search-guard:search_guard:23.0:*:*:*:*:*:*:*
    cpe:2.3:a:search-guard:search_guard:23.0:*:*:*:*:*:*:*
  • cpe:2.3:a:search-guard:search_guard:23.1:*:*:*:*:*:*:*
    cpe:2.3:a:search-guard:search_guard:23.1:*:*:*:*:*:*:*
  • cpe:2.3:a:search-guard:search_guard:23.2:*:*:*:*:*:*:*
    cpe:2.3:a:search-guard:search_guard:23.2:*:*:*:*:*:*:*
  • cpe:2.3:a:search-guard:search_guard:24.0:*:*:*:*:*:*:*
    cpe:2.3:a:search-guard:search_guard:24.0:*:*:*:*:*:*:*
  • cpe:2.3:a:search-guard:search_guard:24.1:*:*:*:*:*:*:*
    cpe:2.3:a:search-guard:search_guard:24.1:*:*:*:*:*:*:*
  • cpe:2.3:a:search-guard:search_guard:24.2:*:*:*:*:*:*:*
    cpe:2.3:a:search-guard:search_guard:24.2:*:*:*:*:*:*:*
CVSS
Base: 3.5 (as of 08-10-2020 - 13:36)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:M/Au:S/C:P/I:N/A:N
refmap via4
confirm https://docs.search-guard.com/6.x-25/changelog-searchguard-6-x-24_3
misc https://search-guard.com/cve-advisory/
Last major update 08-10-2020 - 13:36
Published 13-08-2019 - 19:15
Last modified 08-10-2020 - 13:36
Back to Top